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VMware: SpringSource 
fulfills vision for apps 



The acquistion gets its virtualization 
ecosystem closer to applications, 
says VMware CEO Paul Maritz. 



BY ALEX HANDY 

VMware has agreed to buy appli- 
cation framework creator Spring- 
Source for US$362 million, puz- 
zling financial analysts who 
questioned the synergies on a 
conference call last month 
announcing the deal. 

Analysts from Merrill Lynch 
and other Wall Street firms ques- 
tioned Paul Maritz, CEO of 
VMware, on the purpose of the 
acquisition. Maritz responded 
that SpringSource would help to 
push VMware's virtualization 
ecosystem closer to applications, 
and negate the need for operat- 
ing systems altogether. 



Originally founded as Inter- 
faces 1, SpringSource was built 
by Rod Johnson to offer service 
and support for the Spring 
framework, which has grown to 
become the most popular Java 
application framework, accord- 
ing to Maritz. 

In the past two years, Spring- 
Source has been making acquisi- 
tions. The largest occurred in 
January, when SpringSource 
acquired Covalent, a company 
that offered service and support 
for the Apache Web Server and 
the Apache Tomcat project. 

Maritz said his company first 
invested $5 million in Spring- 



in April. Johnson, 
and CEO of Spring- 



Source 
founder 

Source, said that round of invest- 
ment was given without strings 
and that his company's acquisi- 
tion of Hyperic a month later was 
a move spurred only by Spring- 
Source's road map. 

Maritz said that bridging the 
gap between applications and 
hardware is the goal of this 
acquisition, and the Hyperic and 
SpringSource products would 
move VMware in this direction. 
"Applications are no longer 
bound to the original operating 
systems. They are increasingly 
continued on page 16 ► 



Where are the women and minorities? 

Computer science careers among 
American groups have narrow appeal 



BY DAVID WORTHINGTON 

Large segments of the U.S. popu- 
lation are not considering careers 
in IT, creating a shortage in qual- 
ified developers. Few students 
are enrolling in computer science 
courses, and a dwindling number 
of those are women and minori- 
ties, government experts say. 

The U.S Bureau of Labor Sta- 
tistics forecasts high demand for 
programmers. Its Occupational 
Handbook for 2006-2016 lists 
computer application software 
engineers as the fourth most in- 



demand occupation due to 
"increased applications of emerg- 
ing technologies" and the growing 
complexity of businesses. Soft- 
ware engineers for systems are 
listed at number 25. 

Despite that demand, there 
has been a "huge drop off in the 
number of computer scientists 
entering into the workforce 
since 2000, said Jan Cuny, the 
program officer at the National 
Science Foundation who over- 
sees efforts to broaden participa- 
tion in computing. 




1 

Seventy percent fewer stu- data. The Higher Education 

dents have majored in computer Research Institute has deter- 

science since 2000; women mined that only 1% of students 

declined by 80%, she said, citing are majoring in computer sci- 

Computing Research Association continued on page 24 ► 
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C C++, 

Java lead 
open source 

BY ALEX HANDY 

The language of open source 
would appear to be C. That's 
according to data released in 
August by Black Duck, a 
provider of software to manage 
the use of open-source code. The 
company's internal database of 
open-source projects was ana- 
lyzed, and the results showed 
that more than 40% of all code in 
projects tracked by the company 
was written in C. 

The Black Duck analysis was 
split, however, into two types of 
statistics: the number of lines of 
code overall, and the number of 
projects with a majority of code 
written in one language. When it 
comes to the number of lines of 
code, C's 40% share placed it 
well ahead of all other languages. 
But when it comes to actual 
number of projects per language, 
Java and Perl won out with the 
lion's share. 

Peter Vescuso, executive vice 
president of marketing and 
business development at Black 
Duck, said that there weren't 
many surprises in this data 
analysis. 

"The high-level result isn't a 
surprise as much as it shows a 
trend you'd expect," he said. 
"Web services and Web pro- 
gramming are growing, so we see 
growth in JavaScript and PHP, 
continued on page 24 ► 




JRuby creators head 
to Engine Yard 
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Smarter technology for a Smarter Planet: 

Can the boundaries of a 
business be defined by its 
people instead of its walls? 

Businesses like nice solid walls, both the physical and the fire variety 
But on a smaller, flatter, smarter planet, we increasingly find ourselves 
working with people far outside those walls: partners, suppliers, 
customers and remote employees. 

IBM is incorporating new tools, like social software, wikis and presence 
awareness, throughout our entire collaboration portfolio— as well as 
new ways of accessing these tools through the cloud. Cloud-based 
solutions like LotusLive™ let your people work with whomever they 
want to, regardless of what side of the firewall they find themselves on, 
because they're backed by the legendary security you expect from IBM. 

Now your organization can extend its collaboration infrastructure 
seamlessly without the cost and complexity of additional infrastructure. 
So you don't have to tear down your walls to reach beyond them. 

A smarter business needs smarter software, systems and services. 
Let's build a smarter planet, ibm.com/collaborate 
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while protecting 
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Swiftcover.com cut their testing time in half with TestTrack Studio and 
QA Wizard Pro, while still providing the quality their customers expect. 

Seapine's end-to-end Software Quality Assurance (SQA) solutions help you deliver quality products faster. Start with 
QA Wizard Pro for automated testing and add TestTrack Studio for issue tracking and test case management-integrated 
quality assurance solutions that together reduce testing time, saving you money and improving customer satisfaction. 

• Reduce quality assurance costs with automated functional and regression testing. 

• Manage test case development, defect assignments, and QA verification with one application. 

• Track which test cases have been automated, schedule script runs, and link test results with defects. 
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So much of success boils down to time. QA Wizard Pro and TestTrack Studio allow us 
to be more profitable because we do more in less time. —Test Manager, Swiftcover 
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IBM seeks secure development spectrum 

With Ounce acquisition and security integrations, company looks to blanket portfolio 



BY JEFF FEINMAN 

With another acquisition of a 
security player, and integrations 
among key pieces of software, 
IBM is trying to tighten up its 
security portfolio for the full 
development life cycle. 

Big Blue demonstrated that it 
isn't shy about security when it 
acquired source code analysis 
company Ounce Labs in late July 
to bolster its application security 
testing. The latest acquisition 
offers a very different take on 
security than when IBM bought 
another security company, 
Watchfire, two years ago. 

Watchfire s black box testing 
software, AppScan, was inte- 
grated into IBM's Rational line 
and was made available as a 
standalone product. 

Dave Grant, director for 
security and compliance for 
IBM Rational, explained that 
there is "very little" overlap 
between the offerings brought 
in from Ounce and Watchfire. 
AppScan finds and fixes secu- 
rity vulnerabilities by simulat- 
ing attacks that a hacker might 
launch. Ounce Labs' Ounce, 
meanwhile, scans source code 
to find potential security holes 
and areas of non-compliance 
during development. 

"You're looking at two differ- 



ent ways of solving the problem, 
taking both static source code 
analysis and dynamic build test- 
ing and combining them into 
one offering," Grant said. 
"Ounce looks at the source code, 
and there's a whole different set 
of things that you look at in 
source code for security issues. 
They also cover all different lan- 
guages and environments — Java, 
C++, .NET — that people use to 
build applications." 

Grant added that there are 
some things that dynamic testing 
can't detect in the source code 
and, in the same fashion, some 
security areas of the production 
environment that source code 
analysis cannot view. "Combine 
both of these, it provides the 
most thorough analysis," he said. 

Grant said he is not in a posi- 
tion to speculate on future IBM 
security-related acquisitions or 
product road maps, but he didn't 
rule them out, saying that IBM's 
goal is to round out its security 
offerings from application devel- 
opment through to production. 

Dan Powers, vice president 
of strategy for IBM Internet 
security systems, said IBM cus- 
tomers need to look at security 
across all areas. 

"When you look across the 
different security domains with 



the industry around identity, 
data and information, applica- 
tion and processes, as well as 
network server and endpoint, 
IBM has a tremendous amount 
of products and services across 
that portfolio," he said. 

"We're trying to bring that 
portfolio together to try to 
provide more of these inte- 
grated solutions against poten- 
tial areas of threat." 

IBM has integrated its Web 



application security offerings in 
a new strategy dubbed 
"Smarter Security." 

The company announced in 
August that it integrated Web- 
Sphere DataPower's SOA 
Appliances with Tivoli Security 
Policy Manager. This lets man- 
agers enforce security policies 
for Web services through Tivoli 
and WebSphere. Powers said 
DataPower users have been 
exposing those Web services to 



the public for partner and sup- 
plier use and "obviously want to 
make sure those are secure." 

Additionally, IBM announced 
Proventia SiteProtector 8.0, 
which integrates AppScan with a 
Web application protection 
module for network and host 
intrusion prevention systems. 

This integration cuts securi- 
ty management costs and brings 
more consolidated reporting, 
according to IBM executives. I 



ORIGINAL ENGAGES IN 'GORILLA' WARFARE 



BY JEFF FEINMAN 

By joining hands with a fellow 
testing company, Original Soft- 
ware is hoping to wedge away 
some of the market from the 
industry heavyweights. 

Application quality manage- 
ment company Original and test- 
ing service provider AppLabs 
have agreed to market each oth- 
er's products. Original focuses on 
testing automation with its Test- 
Drive test automator and Test- 
Bench database tester. AppLabs 
provides offshore and out- 
sourced testing, along with many 
other testing services. 

George Wilson, founder and 
operations director for Original, 
said this is a way for a company 



like Original to compete and sur- 
vive against the likes of Hewlett- 
Packard, IBM, Microsoft and 
Oracle. He said that smaller 
companies like Original have a 
level of flexibility that some of 
the industry "gorillas" don't. 

"These large companies, 
when they acquire other com- 
panies, it increases the inflexi- 
bility," Wilson said. 

"Customers want software 
that doesn't jolt them and 
makes their lives easier at a rea- 
sonable cost. You don't neces- 
sarily improve that process by 
saying, 'We've got a gap there 
so we need to buy this.' You 
improve the software process 
by investing in technology that 



will make it better." 

Wilson said there was no 
market pressure for either com- 
pany in partnering, and that this 
was more a logical step than 
one forced by financial issues. 

"It's not a cost-driven exer- 
cise by any means," Wilson said. 
"We're doing really well at the 
moment and have a very strong 
pipeline in the U.S." 

Heading into the home- 
stretch of 2009, Wilson 
expressed little concern that 
Original will have any trouble in 
an uncertain economic climate. 
"It's not really a question of 
keeping our head above water, 
it's a question of swimming 
hard and fast," he said. I 



Planning is key to using CEP successfully 



BY DAVID WORTHINGTON 

With so much computation hap- 
pening in memory, designing a 
Complex Event Processing 
(CEP) application can be com- 
plex indeed. CEP is up-and- 
coming as an application use, 
said Lab49 managing consultant 
Joe Morrison. It is applied to 
many areas in financial services 
and middleware office applica- 
tions, in addition to keeping tabs 
on latencies in high perfor- 
mance applications, he said. 

A "building block" method- 
ology for application develop- 
ment makes it easier to incre- 
mentally build features and 
expand functionality down the 
line, said John Morrell, vice 
president of marketing at Aleri, 
which sells a CEP platform con- 
sisting of authoring tools and 
middleware. By using a modular 
approach, Morrell said, devel- 
opers can keep a standardized, 
steady data interface between 
components and adjust compo- 
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Aleri uses a "building block" method for application development, which 
makes it easier to incrementally build in features down the line. 



nents without impacting others. 

Aleri details five building 
blocks for CEP development. 
The first two deal with creating 
high-speed data streams and 
preparing that data for analysis; 
and integrating event stream 
data with historical and refer- 
ence data. 

They then progress to per- 
forming aggregations and com- 
putations on data; identifying 



business events in analysis and 
mapping decision to actions, 
then generating outputs or 
events for downstream applica- 
tions and users; and generating 
multi-dimensional analytic 
results. Application state man- 
agement is also overviewed. 

"We wanted to tell people 
that you don't have to be afraid 
of CEP," Morrell said. Many cus- 
tomers take approaches that are 



similar to what they do for pro- 
ducing offline analytics, such as 
capturing, cleansing and prepar- 
ing data, he explained. However, 
there are key differences that 
developers should know. 

Aleri in late July began 
releasing "best practices" Webi- 
nars and white papers for the 
design of CEP applications. 

PLANNING AHEAD 

A common mistake made by 
developers is that they start out 
building applications without 
knowing the results that they are 
looking for, said Morrell. "The 
most successful CEP implemen- 
tations have been where they 
understand a business process 
from the top down, and adjust 
the process itself to deal with 
things faster and receive more 
information in a timely fashion." 
It is also important to pick 
the right tools. Developers 
should decide whether visual or 
contextual programming tools 



are a better solution for their 
project, said Morrison. "We've 
found that a visual program- 
ming model is nice for straight- 
forward applications, but more- 
complex applications require 
contextual languages, which are 
more powerful and expressive." 

Design could also be dictated 
by whether an application needs 
to call out to C++, Java or .NET 
code to integrate with external 
systems, he said. 

If an enterprise is already 
using a business intelligence or 
data warehousing solution for 
their data visualization layer, it 
should consider using pre-inte- 
grated CEP solutions that are 
available, integrated and opti- 
mized for that platform, said 
Forrester senior analyst James 
Kobielus. 

IBM and TIBCO Software 
offer CEP middleware for their 
Cognos and Spotfire products, 
and other companies that do 
not have CEP capabilities, 
including SAP, will reference 
customers to partners, he said. 
continued on page 18 ► 
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Hewlett-Packard will resell iTKO's LISA Virtualize testing visual- 
ization software, so customers can combine it with HP Software 
Quality Management. iTKO executives said LISA Virtualize can help 
HP users work faster by mimicking a system's behavior and perfor- 
mance in order to respond like a real production environment would 
. . . IBM has created the China Analytics Solution Center, its Bei- 
jing-based China Business Innovation Center. The facility's goal is to 
solve complex business problems with IBM's capabilities in analyt- 
ics and optimization. It will be initially staffed with 300 software 
engineers and mathematicians, with plans to add another 300 
workers, according to IBM. 



NEW PRODUCTS 



Online agile workspace company Assembla has created Private 
Assembla, an enterprise version of its distributed agile develop- 
ment platform. Private Assembla includes Git and Subversion 
code repositories, collaboration features such as message boards 
and wikis, and Scrum reporting and time tracking. It is available 
as a download that can be run behind the firewall, on Amazon 
Elastic Compute Cloud, or as a fully managed service, the compa- 
ny said . . . AccuRev has released Web 2.0 Interface, which gives 
globally distributed teams access to AccuRev's change manage- 
ment platform through both Microsoft Internet Explorer and 
Mozilla Firefox. Web 2.0 Interface also lets software managers 
and testers view issue queries, the company said. 
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UPDATES 



Enterprise development component company Syncfusion has 
added a new WPF Grid control and new OLAP (online analytical pro- 
cessing) grids and charts to Essential Studio 2009 Volume 3, a 
new version of its component suite for ASP.NET and .NET. Also in 
the new version of Essential Studio: all Web Forms ASP.NET com- 
ponents were updated to be fully compatible with Internet Explorer 
version 8, according to the company . . . National Instruments 
announced LabVIEW 2009, the latest version of its graphical sys- 
tem design software platform. LabVIEW 2009 has a feature called 
LabVIEW Wireless Sensor Network Module Pioneer, which lets users 
program individual wireless sensor network measurement nodes 
through graphical programming. National Instrument executives 
said engineers and scientists can use LabVIEW to extend node bat- 
tery life, increase acquisition performance, and create custom sen- 
sor interfaces . . . Windows host integration and terminal emulation 
company Zephyr has made available PASSPORT Host Integration 
Objects Version 2009-731, its host integrator that gives object- 
oriented access to IBM 3270 and 5250 host applications. The new 
version lets events be written in JavaScript and VBScript, and can 
be used with Windows 7 and Windows Vista . . . Telerik released 
RadControls for Silverlight 3. RadControls includes a 3D charting 
engine that is designed to make complex data into interactive, ani- 
mated graphics. 



PEOPLE 
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Doug Cutting, the creator of the Apache Hadoop framework, has 
left Yahoo to join Cloudera, an enterprise data company that was 
founded to provide resources for Hadoop users. Having Cutting on 
board will mean that Cloudera can continue to release disc images 
for Amazon's cloud, and it may start building some products based 
on Hadoop . . . Russell Tait has been named managing principal for 
software security company Cigital. Tait, who is based out of Los 
Angeles, will help try to expand the company in the western United 
States. According to Cigital, Tait has managed security and devel- 
opment projects for Boeing, Disney, HBO and Suzuki. He previously 
served as managing director at visualization software company 
iRise, where he led the company's security practices. I 



Thomas Enebo, left, and Charles Nutter, JRuby architects at Engine Yard. 




BY ALEX HANDY 

Charles Nutter and Thomas 
Enebo are bilingual. They've 
spent the past two years at Sun 
Microsystems working on JRu- 
by which allows developers to 
write Ruby code and run it on 
top of a JVM. But after Oracle 
began its takeover of Sun, Nut- 
ter and Enebo say they found 
the environment there increas- 
ingly frustrating. 

So, this August, the pair left 
Sun and joined Engine Yard, a 
Ruby-focused hosting and 
development startup in San 
Francisco's hip South Park 
neighborhood. It was there that 
we caught up with the JRuby 
pair and asked them about the 
project, their new jobs and the 
future of Java. 

SD Times: When last we spoke, 
Java developers were screaming 
for a simple scripting layer on top 
of Java. You two had, essentially, 
given the community as much by 
releasing JRuby. But since that 
time, almost every language has 
a bridge to the JVM. Is this trend 
going to continue? 
Charles Nutter: It's definitely 
continuing and accelerating. I 
think what we managed to 
prove with JRuby is that the 
JVM is and always has been an 
excellent platform for multiple 
languages. Languages like Scala 
and Clojure are designed for 
the JVM. The interesting chal- 
lenge for us and Jython and 



Rhino are bringing languages 
from off platforms with their 
own ecosystems and making 
them also work on JVM. 
Thomas Enebo: Those external 
projects have their own expec- 
tations they bring with them 
from their environments. Those 
languages were originally writ- 
ten in C, and some of those fea- 
tures don't exist in the JVM. 
So, you collaborate with the 
Jython project? 

Nutter: We work with those guys. 
We have similar challenges. 
Enebo: We share some code 
between the projects now as 
well. The JVM doesn't give you 
access to POSIX libraries. So 
we have a POSIX library we 
share between the two projects 
that uses JNA to call out some 
of the C methods that the JVM 
doesn't give you access to. 
With all these languages on top 
of Java, do you think Java (as a 
programming language, not as an 
environment) is becoming less 
relevant? 

Nutter: I think Java is becoming 
the C of the JVM. It's what all 
these languages are implement- 
ed in at some level. It's the lin- 
gua franca. 

The ability to access Java 
libraries from Ruby code seems to 
be a killer feature for JRuby. Is 
this why most people are using it? 
Nutter: The Java platform is 
extremely mature, and for just 
about any feature or framework 
you're looking for, there is at 



least one library, probably two 
or three, with multiple itera- 
tions. The Java platform has a 
lot of bad libraries on it, but it 
also has a lot of libraries that 
learn from those mistakes. 
Enebo: There's something like 
7,000 different XML libraries 
in Java of various levels of qual- 
ity, but that's a completely 
solved thing in the Java space. 
Nutter: In the Ruby space, up 
until the last year or two, the 
XML libraries were not as good. 
What sort of benefits are you 
seeing from mixing language 
communities? 

Nutter: One of the big draws 
for JRuby and for Jython is the 
fact that there is this entire 
external community that has 
never been bound by the limi- 
tations of the Java platform. 
They've come up with new 
ways of solving those problems. 
By the same token, people 
are recognizing that different 
languages solve different prob- 
lems in different ways. The 
majority of JRuby applications 
are there for the Web, but odd- 
ly enough, a lot of people are 
interested in desktop applica- 
tion work, too. 

Enebo: There are, like, 11 dif- 
ferent GUI libraries written in 
Ruby to wrap Swing or SWT. 
Now JRuby is going to solve the 
Java GUI problem? 
Nutter: It's a pain point on the 
Ruby side because there's not a 
continued on page 17 ► 
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Microsoft MVC update addresses developer concerns 

Ul helpers, templates and data annotation show framework is maturing, experts say 



BY DAVID worthington and templates, as well as support ASP.NET MVC 2 Preview 1 with Visual Studio 2008 and beta 

Microsoft's July 30 preview of for data annotations, as the is available as a free download versions of Visual Studio 2010. 

thenextiterationofitsASP.NET company evolves the software to for developers. It requires "To me, it shows that MVC 

MVC framework adds UI helpers address developer concerns. ASP.NET 3.5 SP1, and works continues to be a supported 
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by LEAD Technologies 
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Visualize, Document and 
I Control Your Software Project 
\ by Sparx Systems 

j Enterprise Architect is a comprehensive, 
: integrated UML 2.1 modeling suite 
I providing key benefits at each stage of 
: system development. Enterprise Architect 
\ 7.5 supports UML, SysML, BPMN and 
j other open standards to analyze, design, 
j test and construct reliable, well under- 
i stood systems. Additional plug-ins are 
• also available for Zachman Framework, 
! MODAF, DoDAF and TOGAF, and to 
: integrate with Eclipse and Visual Studio 
I 2005/2008. 
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SQLBase is an easy to deploy database 
for building desktop and Web applications 
in server environments without a DBA. 

• Small footprint 

• Zero admin deployment 

• GUI admin 

• Embed it and forget it 

For applications with encrypted security, 
; we offer SQLBase Treasury. 

Reduce your database costs and simplify 
; maintenance with Unify SQLBase. 

Orion Network 
Performance Monitor 

by Solarwinds 

j Orion Network Performance Monitor is a 
I comprehensive fault and network performance 

management platform that scales with the 

rapid growth of your network and expands 
I with your network management needs. 

It offers out-of-the-box network-centric views 
| that are designed to deliver the critical 

information network engineers need. 
; Orion NPM is the easiest product of its 

kind to use and maintain, meaning you 
I will spend more time actually managing 

networks, not supporting Orion NPM. 
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New VMware Solutions for Small Businesses 

VMware vSphere Essentials Editions combine the S $\m. 

high availability, performance and reliability of 

our enterprise class solutions with packaging ideal 

for smaller IT environments and a price starting 

at less than $ 1,000 for a complete solution. 

• VMware vSphere Essentials provides an 
all-in-one solution for small offices to virtualize 
three physical servers for consolidating and 
managing applications to reduce hardware and 
operating costs with a low up front investment. 

• VMware vSphere Essentials Plus adds 
high application availability and data protection 
for a complete server consolidation, manage- 
ment and business continuity solution 
for the small office IT environment. programmers.com/vmware 
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r7.3 - Product Plus 1 Year 
Enterprise Maintenance 

CA ERwin Data Modeler is a data modeling 
solution that enables you to create and 
maintain databases, data warehouses 
and enterprise data resource models. 
These models help you visualize data 
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organize, manage and moderate data 
complexities, database technologies and 
the deployment environment. 
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alternative to classic Web Forms 
development, though the types 
of features that are being added 
prove that MVC isn't yet as 
mature as Web Forms," said 
Tony Lombardo, lead technical 
evangelist at component maker 
Infragistics. 

The helper templates raise 
the level of abstraction for pro- 
grammers. "Rather than think- 
ing about 'dateTimes,' think 
about Teople' or 'Cars' and get 
reusable templates for display 
and editing," said Brian Gold- 
farb, director of developer and 
user experience platforms at 
Microsoft. 

Strongly Typed UI Helpers 
reduce the number of "magic 
strings" developers have to use, 
resulting in easier-to-read code 
and cleaner markup, Goldfarb 
said. Magic strings are a design 
practice that can result in unex- 
pected program responses. 

Data Annotations allow 
developers to mark up models 
with declarative attributes, 
resulting in clean, easy valida- 
tion, according to Goldfarb. The 
MVC 2 road map also includes 
client validation, strongly typed 
helpers for input and links, a 
parallel programming model for 
calling external resources, and 
continued refinement of MVC's 
"Areas" feature. Areas help 
developers organize their appli- 
cations without requiring multi- 
ple projects. 

"I think the underlying 
theme is that Microsoft is com- 
mitted to MVC as a platform 
option, and not just a short-term 
stopgap or 'best practice,' " said 
Lombardo. "It's interesting that 
features like data annotations 
from Dynamic Data are finding 
their way into MVC as well, 
moving from Web Forms." I 
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Parasoft composes Concerto ALM platform 



BY JEFF FEINMAN 

Parasoft has gotten into the 
ALM 2.0 game with new soft- 
ware for creating and enforcing 
development project policies, 
as well as providing reports on 
the progress of tasks through- 
out the application develop- 
ment life cycle. 

Parasoft Concerto, released 
in August, tries to smooth the 
flow between different phases 
of the life cycle, including 
requirements management, 
defect tracking and source con- 
trol management. 

Like many ALM companies, 
including Kovair and Urbancode, 
Parasoft leverages APIs from 
third parties for Concerto, so it 
can integrate with such life-cycle 
tools as Hewlett-Packard Quality 
Center, IBM Rational Requi- 
sitePro, the source code tools 

RIZZO, PATTISON 
TO KEYNOTE 
AT SPTECHCON 

Tom Rizzo, Microsoft's direc- 
tor of SharePoint, and Ted Pat- 
tison, a well-known author, 
trainer and SharePoint MVP, 
will give keynote talks at 
SPTechCon, the SharePoint 
Technology Conference to be 
held on Feb. 10-12 in 
Burlingame, Calif., outside of 
San Francisco. 

In his role at Microsoft, Rizzo 
leads a team that helps cus- 
tomers and partners understand, 
develop on and deploy Share- 
Point. He has worked at 
Microsoft for the past 10 years in 
a variety of roles involving the 
company's server products, 
including Exchange Server, 
SharePoint, BizTalk Server and 
SQL Server. Rizzo is also the 
author of a series of books pub- 
lished by Microsoft Press. 

Pattison is the cofounder of 
Critical Path Training, a compa- 
ny that offers SharePoint educa- 
tion. In the fall of 2005, Pattison 
was hired by Microsoft's Devel- 
oper Platform Evangelism 
group to author the Ascend 
developer-training curriculum 
for Windows SharePoint Ser- 
vices 3.0 and Microsoft Office 
SharePoint Server 2007. Since 
that time, Pattison has been 
entirely focused on educating 
professional developers on 
SharePoint 2007, and the com- 
ing 2010, technologies. I 



CVS and Subversion, and many 
other pieces of software. 

"Typically, when we walk 
into an environment, no one is 
ever like, T'm 100% IBM,'" 
said Wayne Ariola, Parasoft's 
vice president of strategy. 



"There's just so much going on 
in an organization, especially if 
you're working with a distrib- 
uted team, a third party or an 
outsourcer. There're all these 
other repositories and systems 
out there that need to be con- 



nected up so everyone can get a 
cohesive view." 

Concerto allows managers to 
set up policies for the comple- 
tion of all tasks. Project team 
members will be notified when 
a policy isn't being followed. 



Other notable features in 
Concerto include Report Cen- 
ter, which can provide informa- 
tion that lets managers deter- 
mine when additional resources 
are needed, and the ability to 
use Microsoft Word and Excel 
documents to help organize 
projects or attach information 
for other team members. I 
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PreEmptive 
Solutions 
reaches for 
the cloud 

BY DAVID WORTHINGTON 

PreEmptive Solutions has 
updated its Dotfuscator .NET 
runtime intelligence product to 
work with Windows Azure. The 
company says that runtime 
intelligence is a useful way to 
gauge how much a hosted 
application will cost to run. 

In July, the update became 
available for free to customers 
who have current license agree- 
ments. Dotfuscator instruments 
Azure application assemblies 
and allows signals to emerge at 
any endpoint, said Sebastian 
Hoist, chief marketing officer 
for PreEmptive. 

Dotfuscator can protect 
source code from being reverse- 
engineered, track application 
feature use, enable time limits 
on application use, and detect 
and defend against tampering. It 




A usage and performance comparison of a single feature's profile when 
run on a client versus when the same feature is used inside Azure. 



can also stream alerts and run- 
time data to Web-based services. 

Its feature- and session- 
tracking capabilities would be 
most useful to Azure develop- 
ers, Hoist said. "Organizations 
that are thinking about target- 
ing Azure have a couple of 
questions front and center. 
Does it work the way that I 
expect it to? And how are 
bandwidth and storage behav- 
ing?" he said. 

Many organizations may not 
know how their existing applica- 
tions will behave when they are 
ported to the cloud, because 
they don't measure bandwidth 
internally, Hoist said. 



Developers can use Dotfus- 
cator to compare how an appli- 
cation performs on premises to 
its performance running in the 
cloud. It has charts, graphs and 
dashboards to help developers 
compare common features, 
Hoist said. 

The Azure runtime analytics 
provide developers with a sense 
of how much refactoring they 
will have to do, he added. 

A non-commercial version 
called Dotfuscator Community 
Edition will ship with Visual 
Studio 2010. PreEmptive has 
not decided whether it will add 
Azure instrumentation to that 
version, Hoist said. I 



CA taps Eclipse 
for universal GUI 



BY JEFF FEINMAN 

CA has released a new Eclipse- 
based GUI that it says makes it 
easier to test and debug applica- 
tions on the mainframe. The 
GUI, released in August, main- 
tains all the features from the 
green screen, and it helps devel- 
opers reuse existing mainframe 
application code to speed devel- 
opment time, the company said. 

Mark Combs, senior vice 
president of research and devel- 
opment for CAs mainframe 
business unit, said the new GUI 
makes experienced mainframe 
developers more productive, but 
also provides an easy onramp for 
less experienced developers. 

"It enables programmers to 
be working on a workstation 
that is coherent and cohesive, 
instead of having to flip back 
and forth in different para- 
digms for mainframes and 
Java," Combs said. 

"It provides for integration 
with all the other things that 
live in the Eclipse environment, 
including source control, con- 



figuration management sys- 
tems, and tools used to con- 
struct SOA applications." 

The GUI is the main update 
in new versions of CAs InterTest 
for CICS, a tester for IBM's 
CICS Transaction Server, and 
CAs InterTest Batch, which 
debugs applications written in 
COBOL and PL/I. InterTest for 
CICS now lets users add listings 
to their PROTSYM storage files, 
while InterTest Batch testers can 
map storage to a DSECT format 
specification section. 

"They're symbolic debug- 
gers, and they basically allow a 
programmer to interact directly 
with a program he's debugging 
to do things like set break 
points, modify data, and test 
sets of conditions," said Combs. 

"Having done that, they can 
step through the program 
instruction by instruction and 
see what the different data 
fields look like as they go along. 
It's a tremendous productivity 
booster to somebody debug- 
ging a program." I 
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Apache Commons Math reaches 2.0 

New version supports JDK 1.5 while breaking backward compatibility 



BY ALEX HANDY 

The Apache Foundation did 
the math. The end result is 
version 2.0 of the Apache 
Commons Math library, which 
was released in early August. 
The new version of this open- 
source math library brings in 
better support for linear alge- 
bra, new optimizations and 
genetic algorithms. 

Phil Steitz, committer on 
Apache Commons Math and 
an Apache Software Founda- 
tion member, was the release 
manager for 2.0. He said that a 
big focus for this version was 
improving the API for the 
library. That meant breaking 
backward compatibility, how- 
ever. 

"[For 2.0], we decided that 
we really wanted to increase 
the required JDK level to JDK 
1.5," he said. "The Apache 
Commons Math project start- 
ed in 2004, and a lot of the 
original code was written to 
run on even 1.2. We decided in 
2.0 that we wanted to fully 
modernize the codebase by 
doing things like bringing in 
support for generics. 

"The library had grown sig- 
nificantly, and to make it more 
accessible and address some 
problems we had with the ear- 
ly versions of the API, we 
decided we wanted to repack- 
age some of the code to 
address some of the mistakes 
we made in the early version of 
the API." 

Thus, version 2.0 of the 
Apache Commons Math library 
requires JDK 1.5 for the first 
time. 

Another major focus for this 
release was linear algebra. In 
2004, when Steitz contributed 
the first bits of code that 
formed the Apache Commons 
Math project, there weren't 
many options in the open- 
source math library world of 
Java, said Steitz. 

As an example, he called 
out JAMA, the Java Matrix 
Package, originally created by 
the National Institute of Sci- 
ence and Technology. JAMA, 
while useful, was not being 
maintained in 2004, he said, 
and that meant there were no 
optimizations being done on 
the code. 

The JAMA API was an influ- 
ence on the Apache Commons 
Math library API, said Steitz. 



He added that, with the inclu- 
sion of the new support for lin- 
ear algebra, sparse matrices and 
matrix decomposition algo- 
rithms, the Apache Commons 



Math library has filled in the 
gap left open by the long- 
ignored JAMA. 

Steitz said that, over the past 
year, the Apache Commons 



Math library has enlisted more 
than 35 contributors. Those 
contributions are helping to 
push the project ahead, and he 
said he expected the new 



genetic algorithms to be a big 
focus in the next year. 

The Apache Commons 
Math library is available at the 
Apache website. I 
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Sybase PowerBuilder delivers .NET migration path 

With latest release, developers now can port their Win32 applications to WPF 



BY DAVID WORTHINGTON introduces a Windows Presenta- 

Sybase s PowerBuilder 12 devel- tion Foundation (WPF) module 

opment environment, which was for migrating Win32 applica- 

released into beta in August, tions to .NET. 



Sybase delivered low-level 
infrastructure support in 
PowerBuilder 11, and it is now 
providing visual designers for 



.NET application development. 
It will be generally available in 
the first half of 2010. 

PowerBuilder 12 includes 




two design-time modules: One 
for building and maintaining 
applications in Win32 with sup- 
port for .NET development, 
and a new WPF module that 
has an integrated Visual Studio 
2008 shell for writing applica- 
tions entirely in managed code. 

A migration utility enables 
developers to convert Win32 
applications into WPF, but the 
ease of migration rests on the 
quality of the application, as 
well as whether it includes any 
deprecated technologies such 
as Object Linking and Embed- 
ding controls, said Sue Dun- 
nell, product manager for 
PowerBuilder. 

Sybase provides reference 
applications for its customers to 
show them what steps they are 
required to take in common 
migration scenarios, she said. 

The WPF module can 
import Visual Studio plug-ins, 
and developers can import con- 
trols from third-party compo- 
nent makers without having to 
understand how the controls 
work, Dunnell said. However, a 
panel is provided for manipu- 
lating AJAX code, she added. 

Secondly, Sybase has rewrit- 
ten its DataWindow control in 
managed code with native sup- 
port for Windows Communica- 
tion Foundation. DataWindow 
is the "crown jewel" of Power- 
Builder, because it can access 
virtually any database with just 
a few lines of scripting, and can 
manipulate and display data 
according to business rules, 
Dunnell said. 

"A proxy is generated for 
each PowerBuilder object to 
call methods on any remote ser- 
vice. [DataWindow] is a simple 
way to support WCF natively 
without needing a developer to 
know too much about what they 
are doing," she added. 

Some other new features 
include visual inheritance for 
WPF windows and User 
Objects, and a drag-and-drop 
capability for access to proper- 
ties and methods of controls that 
are graphically added to WPF 
windows, according to Sybase. 

PowerBuilder 12 is the cul- 
mination of Sybase's plan to 
phase in .NET Framework sup- 
port, which began with the 
release of PowerBuilder 9, 
Dunnell said. Silverlight tooling 
will be added next. I 



14 



NEWS 



Software Development Times ■ September 1, 2009 , 



www.sdtimes.com 




Discover 
SCALABLE 

erformance 

ScaleOut StateServer® 

Simply Powerful Distributed Caching 



As a software architect, you know the 
importance of combining simplicity with power. 

ScaleOut StateServer's distributed cache gives 
you both. 

Its powerful architecture frees you from tedious 
configuration chores so that you can quickly - 
and easily - tap into blazing performance, 
scalability, and 24x7 availability. 



■ ■.■■■■■ 



Give your server farm and grid 
applications the performance 
boost they need. Check out 
ScaleOut StateServer ^ 

today. » m * * 

* * a * 

» 4 * 



i * * « * * m 



* * * * 

a a a a 



« a a • 

a 4 o a 

* * * 

« * 1 




® ScaleOut Software 

www.scaleoutsoftware.com | (503) 643-3422 



inner workings 



Seaichaflam UprtaleFanel 



C* 



» Search 20 reiufa; fowld «n 0.035 seconds 



wf^u'l.tiaL'i 1 ; 

CanlroUng p*g? upw&es- arm Vie iJpdatePanel coraln? 

rn* ACCivJiyLIIHI Li»J <e*Ci*4l i* *n# P*4*u|t , »f p» P*|* It **ttpto4*(t4 

Intidi hi UptlwtcffwMl mth hi ID of ActiYit>ypdit#Rirwl . m* Jpd*t«?wl 
«*l n«I i*tf!*t -flfn «**>* updjic t»*rt*i i H* in* pflt JtM^*tt pWftteHf . 

■.jinlrnlinj page updates- wilh ttm Update Parted tonlrd 

M 11m HufE£rld¥lt*_HMU|xlitKi «*nfc rwidlir In the JJefmUt jiinlil Elw 
W tn th# B4j|idHdViB» firldVfau control. 

AjAX ensuing wi ASP MET wwtrene 

fn* tvfvEt- 4>*L«v|-t« to^f^l jw in* ^n^wm *TJ Mmni L*bti <0*Hr$L 
in thi bt'iult .aljjx p*fe ir* tficipiul-itEd Ini-itii hi OpoMtcfjo*! control 

^etaun asnac 

Prowling! retxlliJK k wnh Ihe l^dalKPrugitojii cmrfrnr 

CodeBox uses metadata to return relevant results. 



InnerWorkings' CodeBox 
scours .NET reference code 



BY DAVID WORTHINGTON 

Sometimes a developer can find a solu- 
tion quickly by looking at code. Inner- 
Workings, a company that offers .NET 
training services, has developed a code 
search engine for its customers to refer- 
ence as they program. 

CodeBox, made available in August, is 
a free text search engine that uses meta- 
data to retrieve relevant and valid code 
samples, said InnerWorkings solutions 
architect Michael O'Brien. It is only avail- 
able to InnerWorkings customers, but it 
could be available publically later, he said. 

The CodeBox repository contains 
over 1,000 code samples for every .NET 
framework and is as current as .NET 
Framework 3.5 Service Pack 1, O'Brien 
said. Customers can see the context code 
was used in and download code samples 



to a file to open in Visual Studio. 

There are several popular code 
search engines on the Web but those 
provide search results with mixed quali- 
ty that are not always relevant, he said. 
"They are not always professionally writ- 
ten and reviewed, and may be a depre- 
cated method or API. We have multiple 
levels of review here, and the code has 
all gone out to customers." 

Code search engines look at class and 
method names, but fail to extract the 
meaning from the source code, O'Brien 
added. 

Code search is an important tool for 
developers because navigating around 
large frameworks is becoming a tricky 
task, he said. "It is barely possible to 
become an expert on one little section of 
a framework." I 



DevExpress updates DXperience 



BY DAVID WORTHINGTON 

Component maker Developer Express 
has released its second wave of controls. 
DXperience v2009 vol 2 is heavily 
focused on improving product quality, 
and introduces Silverlight 3 controls, said 
CTO Julian Bucknall. 

"We are taking the quality bull by the 
horns. DXperience 2009.1 was a bit of a 
mess," he said. "We released minor ver- 
sions with bug fixes once a week for a few 
weeks very quickly after a major release." 

Volume 2 takes DevExpress' Win- 
dows Presentation Foundation (WPF) 
controls out of beta, Bucknall said. They 
include charts, a docking control, a nav- 
igation bar, a new printing library, and 
various carousel and grid controls. 

The final WPF grid control has edi- 
tors, which were previously unavailable 
in the beta. DevExpress also improved 
performance without reducing flexibili- 



ty, Bucknall said. 

The suite's Silverlight 3 controls are 
designed to replicate the functionality of 
DevExpress' ASP.NET and Windows 
Forms controls, he said. They include 
editors, layout controls, a rich text edi- 
tor, and a data grid that is based on the 
company's freeware grid. 

DevExpress' ASP.NET controls have 
been adjusted to perform better, requir- 
ing less back-and-forth communication 
with Web servers, Bucknall explained. 
"Before, we didn't compress JavaScript or 
hyphenate." The ASP.NET HTML editor 
now offers full table support. 

Few changes were made to DevEx- 
press' Windows Forms controls other 
than targeted responses to customer 
requests, said Bucknall. Some of those 
changes are new WinForms chart types 
and a mail merge feature in the rich text 
editor. I 
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VMware to buy SpringSource, framework 



< continued from page 1 

being written to these third- 
generation frameworks," said 
Maritz. "By some estimates, 
half of new Java application 
development work is being 



done in the Spring environ- have to be able to make the with operating systems, he said. 



ment. Some 2 million develop- 
ers — according to Gartner — 
have been touched by Spring." 
He went on to say that to be 
able to grow in the future, "We 



data center environment signif- 
icantly simpler to operate." This 
requires VMware to interoper- 
ate more closely with applica- 
tion layers rather than simply 



HYPERIC AND HYPERVISORS 

Raghu Raghuram, vice presi- 
dent and general manager of 
VMware's server business unit, 
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introducing the combined accusoft pegasus, 
the leading provider of imaging SDKs & viewers. 

Accusoft and Pegasus Imaging have combined. And that merger makes 
us the world's largest and most experienced provider of image viewing, 
forms processing, image compression, image capture, and image 
processing technologies. 

So, if you're into thai kind of thing, come to us first, Pius, we back our 
products with tip top tecii support, unlimited triads and reaily flexible 
licensing. What more do you need? 
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Stop by .idccusoft.com and see everything we've got. 



said that the Hyperic's tools will 
become a part of VMware s 
existing solutions. "VMware 
and SpringSource will work to 
ensure top-to-bottom visibility 
across the combined technolo- 
gies, specifically a unified view 
of Java applications and the 
infrastructure that supports 
them," said Raghuram. 

"To achieve this goal, we will 
build integrations between 
SpringSources Hyperic prod- 
ucts and VMware's vCenter 
solutions. This work will pro- 
ceed in phases, with the prod- 
ucts getting progressively more 
tightly integrated over time." 

Al Hilwa, program director 
for application development 
software at analysis firm IDC, 
counts VMware among his 
clients. He said that the acquisi- 
tion of SpringSource is indica- 
tive of VMware's desire to grow 
into a major enterprise software 
force. 

"This is a tremendous deal 
between Rod Johnson and the 
team. I think it's a good mar- 
riage," he said. "You've got a 
company like VMware that's 
slowing down and looking for 
its next act: something more 
than infrastructure. 

"Initially I was thinking it was 
the Hyperic stuff, but even that 
alone may not have justified the 
high price," Hilwa continued, 
explaining why he initially 
thought VMware made the 
acquisition. Hyperic's manage- 
ment and monitoring tools fit 
within the bounds of VMware's 
existing product lines, while 
SpringSources other products 
play outside of those markets. 

But Theresa Lanowitz, 
founder of analysis firm Voke, 
agreed that VMware's desire to 
move closer to the application 
layer is the real reason for the 
acquisition. "What it really shows 
is VMware's movement toward 
understanding the importance of 
the application in these environ- 
ments. As a holistic acquisition, 
it's a strong, smart move for 
VMware, and I do think Hyperic 
played a role in that decision," 
she said. 

Johnson agreed with the 
characterization . 

"This doesn't change Spring 
directly," he said. "Now we can 
do a better job as stewards in 
the open-source community. 
Frankly, it's pretty exciting to be 
in an organization with greater 
resources and some very deep 
skills in complimentary areas." 

The acquisition of Spring- 
Source should be completed 
early this month. I 
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JRuby steams into Engine Yard 



< continued from page 6 

single framework they can use, 
and it's a pain point on the Java 
side because Swing is just mas- 
sive. So people have created 
Ruby wrappers for Swing. 
Enebo: Java's such a portable 
runtime that Swing just runs on 
every OS, and it addresses a 
problem Ruby doesn't address 
very well. 

Why did you both decide to leave 
Sun? 

Nutter: It was largely the uncer- 
tainty of staying at Sun that was 
difficult for us. JRuby is a fast- 
moving project, so not being 
able to talk about the future, 
not being able to talk about the 
progress [was tough]. We felt, 

Software, 
services value 
at $2.2 trillion 

BY DAVID RUBINSTEIN 

The global software and service 
industry generated revenues of 
US$2,239 trillion in 2008, 
according to a report from 
financial analysis firm Research 
and Markets. The report goes 
on to say that the compound 
annual growth rate is expected 
to continue at about 10% 
through 2013. 

Of that $2,239 trillion, 
$413.4 billion was generated by 
the top 10 companies. That 
represents an increase of 12.3% 
over 2007, according to the 
Dublin, Ireland-based firm. 
Net profit for those companies 
in 2008 was $55.7 billion, an 
increase of 18% over 2007. 

Research and Markets 
expects continued demand for 
software and services through 
2013, with strong growth pro- 
jected in different markets 
worldwide. 

Pundits had forecasted a 
rough year for this sector, given 
the global recession and cuts in 
spending and staffing, but the 
compound annual growth rate 
for the sector from 2004 
through 2008 was 12.2%. Much 
of the spending is occurring as 
organizations acquire new soft- 
ware to improve internal effi- 
ciencies, or engage with profes- 
sional services organizations to 
optimize their operations while 
keeping a keen eye on spend- 
ing, according to analysts and 
media reports. I 



with Engine Yard very interest- 
ed in pushing JRuby forward, it 
was time to make a move. It was 
a tough choice But it's almost as 
if Sun left us. 
What would you like to see 



changed in Java? 

Nutter: There are a number of 
JVM level features I'd like to 
see. JSR 292. We're especially 
interested in tail-call support, 
which I think may have a JSR 



soon. I would like to see a layer 
for programmatic access to C 
libraries. There's JNA, but I 
want something similar to that 
which allows you to pull in C 
libraries when you have to. 



There's a lot of people working 
on it as external projects. 
Enebo: Interface injection, 
which I think is a Part of JSR 
292. There's enough mass 
behind these external projects, 
so it will be added to the JVM. 
But JVMs don't come out every 
year, so it will probably take a 
while. I 
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Plan ning is the key to using CEP 

< continued from page 1 I is groping for the right to failure "around the edges" of the sys- call out to custom code, but be careful: 

Another concern is I I programming model to tern, such as when a database or mes- It could mess up the program." 

that many CEP vendors I I enable that." sage bus becomes available. "How does Anything that takes a long time to cal- 



< continued from page 1 

Another concern is 
that many CEP vendors 
use their own proprietary 
languages to query events 
that developers have to 
learn, Kobielus said. "It is 
important to consider 
CEP offerings that inte- 
grate and present an 
abstraction layer to lever- 
age SOA and SQL. I 
would think long and 
hard about committing to 
them if they don't have 
[the abstraction layer]." 

An organization should 
determine whether it real- 
ly does require sub-second 
latency before settling on a CEP solution, 
he said. If you need true sub-second 
latency, CEP is the way to go, but if you 
don't, existing business activity monitoring 
data warehouse middleware can provide 
near real-time features, he explained. 

Many BAM (business activity moni- 
toring) software makers also have some 
degree of CEP capability embedded into 
those environments, said Kobielus. "Ven- 
dors are considering more in-memory 
architecture and memory virtualization 
across disparate platforms. The industry 



Lab49's Morrison says that 
developers can use either 
visual or contextual tools. 



groping for the right 
programming model to 
enable that.' 

Electronic Data Inter- 
change (EDI), which is 
computer-to-computer in- 
terchange of strictly for- 
matted messages, also 
addresses some of the 
same middleware require- 
ments for generating ana- 
lytics as CEP, Kobielus 
said. 

AVOIDING ERRORS 

If a CEP solution is the 
right solution for your 
organization, a little 
knowledge can go a long 
way toward steering a project away from 
potential disaster. 

CEP applications should be created 
in an isolated environment and be unit- 
tested frequently, Aleri's Morrell said. 
"Control inputs, and have outputs work 
as expected. It's a lot of work to set up 
the environments. There should be 
light testing of the entire applications, 
end-to-end." 

Regression testing should also be 
planned in advance, he said. He added 
that particular attention should be paid 
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to failure "around the edges" of the sys- 
tem, such as when a database or mes- 
sage bus becomes available. "How does 
the system respond to that? People 
don't think of that, and it's hard to do 
retroactively." 

State management must also be dealt 
with up front to lessen the risk of data 
loss, Morrell said. "The old-fashioned, 
database-oriented way is slow, but it has 
the virtue of persisting data for shut- 
down and start, so it is easy to resume." 

In contrast, CEP has less transparency 
because more data is processed in mem- 
ory, making it more difficult to persist in 
state. He explained that developers 
should start out asking what would hap- 
pen if someone first pulled the plug on a 
CEP application and later resumed it. 

Another common mistake is attempt- 
ing to do too much in memory. Devel- 
opers should consider limiting the use of 
custom operators for joining and match- 
ing data to avoid creating bottlenecks in 
CEP applications or creating "huge" 
memory usage, Morrell said. "It's nice to 



call out to custom code, but be careful: 
It could mess up the program/ 

Anything that takes a long time to cal- 
culate, or joins data across multiple 
event streams, could also lead to a situa- 
tion where resources are over-utilized, 
he added. "It's easy to write a program 
that looks innocent but at runtime con- 
sumes ridiculous amounts of memory." 

Sometimes it is preferable to perform 
long-running calculations outside of a 
CEP program by sending the message to 
an output queue and retrieving it after 
work is done, said Morrell. Another 
workaround is to introduce an external 
cache for join operations, he added. 
"CEP and caching products work well 
together, and some vendors bundle 
them together." 

Additionally, most SOA vendors will 
continue to strengthen SOA abstraction 
layers to enable CEP, said Forrester's 
Kobielus. The industry is taking the 
"next step" from storage virtualization to 
memory virtualization for analytics in 
"massive parallel environments." I 
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Zend updates tools for PHP 5.3 



BY ALEX HANDY 

PHP 5.3, which appeared at the end of 
June, was a big step forward. Belying its 
point-release version number, the lan- 
guage specification update included 
many features PHP developers had 
been longing for: namespaces, the "use" 
keyword, and class constants. A month 
after completing PHP 5.3, Zend 
released in August Zend Studio 7.0 and 
the open-source Zend Framework 1.9. 
Both include updates that smooth the 
transition from 5.2 to 5.3. 

Kent Mitchell, director of product 
management at Zend, said that 5.3 creat- 
ed a lot of buzz, but developers are still 
evaluating it and perhaps are waiting for 
5.3.1. In the meantime, he said, Zend Stu- 
dio 7.0 and Zend Framework 1.9 will give 
developers a set of tools to get started on 
their new applications based on 5.3, even 
if those applications won't be in produc- 
tion until the inevitable bug fixes arrive. 

"I think you're seeing a lot of experi- 
mentation at this point," said Mitchell of 
5.3 uptake. "But we're seeing a lot more 
aggressive moves than we did from 5.1 
to 5.2. There's a lot more in 5.3 that's 
compelling." 

Zend Studio 7.0 costs US$399, but it 
can be purchased in a bundle that 
includes Zend Studio, Zend Framework, 
Zend Server, and an SLA for service and 
support for $1,495 per seat. Zend 
Framework is open source and can be 
downloaded at no charge. 

All those new language features 
necessitated a new version of the Zend 
Studio IDE, said Mitchell. "If you're not 
PHP 5.3-aware and you start to use 



namespaces, the IDE would not know 
how to properly do code completion for 
namespaces. Before, there were these 
long class names that had names embed- 
ded in them, so it was difficult for people 
to write code cleanly," he said. He added 
that Zend Studio 7.0 is aware of the new 
namespaces formatting and can automat- 
ically complete code that uses them. 

"There are other features around the 
specific things in 5.3. There are some 
new keywords that need to be dealt 
with, and there are closures, all of which 
impact how the IDE works. There were 
also some specific things added around 
refactoring," said Mitchell. 

Zend Framework 1.9 is also a big part 
of the Zend Studio 7.0 update. The 
framework and IDE are now more 
closely integrated, allowing developers 
to jump into coding by using the rapid 
application development tools in Frame- 
work within Studio. 

Zend Framework 1.9 also smoothes 
over the backward compatibility 
between PHP 5.3 and 5.2. "From a user 
perspective, 1.9 works the same on 5.2 
as it does on 5.3. We had to make fairly 
minor changes to the product to make 
sure it worked properly," said Mitchell, 
explaining the changes in 1.9. 

Zend Framework also adds support for 
message queues, whether they are within 
PHP, or part of a larger enterprise system. 
Framework already included security and 
database features that help to smooth 
over some of PHP's classic security fail- 
ings, said Mitchell. New this time around, 
however, is the inclusion of DbUnit, a 
JUnit extension for database unit testing. I 
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WebLayers introduces policy-driven development 



BY DAVID WORTHINGTON 

WebLayers Center 5.0, a SOA 
governance product, is geared 
toward reducing developer 
errors that result from policy 
violations, and toward manag- 
ing multiple projects from a 
single system. 

WebLayers delivered Web- 
Layers Center 5.0 in July. The 
product integrates more deeply 
with supported IDEs, offering 
inline validation of artifacts with- 
in the environment, the ability to 
highlight code violations, and an 
"auto-correct" feature to apply 
suggested fixes, said John Favaz- 
za, vice president of engineering 
at WebLayers. 

That integration is provided 
for Eclipse-based IDEs, Micro- 
soft Visual Studio 2008 and Ora- 
cle JDeveloper, regardless of 
whether developers are con- 
nected to the server or offline. 

WebLayers' expanded man- 
agement capabilities will reduce 
the frequency of defects that sur- 
face late in the software develop- 
ment life cycle, said Favazza. 

WebLayers Center now gives 
greater flexibility to enterprises 
to define corporate ground rules 
for SOA initiatives on the depart- 
mental or project level. Each lev- 
el of infrastructure has a module 
called a governor. 

Governors integrate with 
software tools, application 
servers and containers for differ- 
ent platforms, including Java, 
.NET and legacy systems. Out- 
of-the-box policies have been 
added for Hewlett-Packard SOA 
Systinet, IBM Rational Team 
Concert (RTC), RTC for System 
i and z, Oracle JDeveloper, and 
Oracle Enterprise Repository. 

"We've always been 
impressed with WebLayers' 
approach to SOA governance," 
said Jason Bloomberg, manag- 
ing partner at ZapThink. "Their 
automated governors are an 
excellent approach to scaling 
SOA governance, and the cen- 
tralized approach to policy cre- 
ation combined with distrib- 
uted policy enforcement puts 
WebLayers in a leadership posi- 
tion in the SOA governance 
marketplace." 

In WebLayers Center 5.0, a 
centralized server manages 
governance policies within an 
entire organization. "Develop- 
ers define policies in one spot 
and push them out to any gov- 
ernor, or to other WebLayers 
servers," Favazza explained. 

"It is a centralized adminis- 



trative server, but with distrib- 
uted management and enforce- 
ment," he added. 

For example, project teams 
may use different versions of 
those policies for their projects. 
A policy-versioning feature 



binds different versions of poli- 
cies to different projects, 
Favazza explained. WebLayers 
has a library of policies for sup- 
ported environments so that 
customers can "get governance 
up quickly," he said. 



A "conformance center" fea- 
ture lets software developers see 
the results of policy tests on 
code, and try out test cases to 
gauge the impact of policy 
changes. 

Also, WebLayers Center 5.0 



has new libraries for IBM Web- 
Sphere MQ applications. "We 
are taking information and cod- 
ifying it into the policy library 
so that people develop MQ 
applications in the appropriate 
way," Favazza said. I 
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ScaleOut moves into analysis of ASP.NET cache data 



BY DAVID WORTHINGTON 

ScaleOut Software, a company 
that produces distributed 
caching and state storage solu- 
tions for ASP.NET applications, 
has released a new product that 



focuses on in-memory analytics. 
ScaleOut Management Pack 
became available in August. Its 
two main features are an object 
browser, and parallel backup 
and restoration of data from 



within the cache. 

The object browser permits 
companies to view objects in 
cache through a GUI interface, 
in addition to searching for 
objects individually or by 



groupings, explained David 
Brinker, the company's COO. 
Objects may also be cleared 
from the store. 

Object browsing, he said, 
provides business users with a 
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snapshot of how many sales 
may be in process in an e-com- 
merce shopping cart so that 
management may make a deci- 
sion on whether to extend or 
cut short a sale. 

The parallel backup and 
restore functionality captures 
the contents of a cache for 
analysis. "Each node backs up 
its own cache to its own server 
in parallel," and financial com- 
panies can use it to capture the 
contents of stock trade applica- 
tions at certain points during 
the trading day to perform 
analysis on persisted informa- 
tion, Brinker said. 

Aside from disaster recovery, 
the backup capability also ties 
into ScaleOut s in-memory map/ 
reduce capability to perform 
parallel analysis of data, he said. 

Map/reduce is a software 
framework that allows large 
amounts of data to be processed 
in parallel across different 
nodes. That enables "what if 
scenarios for stock trading, 
Brinker added. 

"This product is moving us 
out of just a distributed caching 
offering into distributed data 
grid," he said. "It adds an analy- 
sis capability; we are not just 
about storing data any longer." I 

Seapine builds 

requirements 

manager 

BY ALEX HANDY 

Requirements management via 
Microsoft Excel or Word isn't 
exactly agile. That's why Seap- 
ine Software is hoping to push 
its new requirements manage- 
ment tool into development 
houses. 

TestTrack RM links into 
existing Seapine issue tracking 
software to give managers a 
better handle on the shifting 
requirements that define their 
projects. 

Rather than rely on e-mail- 
ing documents around an orga- 
nization, TestTrack RM offers a 
Web-based interface for writing 
requirements. When one is 
changed, it can be linked to the 
issue database and the existing 
codebase, giving everyone on 
the team a better view of 
change as it happens. 

TestTrack RM was released 
on August 4. Seapine declined 
to reveal any pricing details. I 
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Telerik builds on Microsoft's MVC framework 



BY DAVID WORTHINGTON 

.NET component maker 
Telerik has announced open- 
source UI extensions for 
Microsoft's ASP.NET Model- 
view-controller (MVC) frame- 
work that it says will make it 



easier for developers to work 
with UI modules that are based 
on the j Query library. 

jQuery is an open-source 
library that allows JavaScript 
developers to add AJAX to their 
projects, handle events, per- 



form animations, and traverse 
HTML documents. 

The server-based Telerik UI 
extensions are available as a 
beta on CodePlex, and are 
licensed under the Microsoft 
Public License (Ms-PL), an 



OSI-approved license that 
Microsoft uses in the distribu- 
tion of its MVC framework. 

Telerik is seeking to bring 
back some of the productivity 
that Web Forms developers 
have had, which the MVC 




VisitSoftwareFX.com for free trial versions, interactive 
demos and more information about our latest products 
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framework sheds to gain per- 
formance and standards com- 
pliance, said Todd Anglin, the 
company's chief evangelist. "We 
are hoping to make it less of an 
either/or question." 

The UI extensions are 
designed to be compatible with 
any MVC view engine, said 
Anglin. "If a developer wants 
complete control to change the 
default engine, our extensions 
will continue to work." 

Telerik has also made 
j Query wrappers available for a 
set of client-side UI compo- 
nents that it has also licensed 
under the Ms-PL. 

A commercial edition will 
also be available to customers, 
said Anglin. Pricing will be dis- 
closed when the UI framework 
is finished, he said. I 

ModelRight 
adds support 
for six DBs 

BY ALEX HANDY 

ModelRight has released ver- 
sion 3.5 of its flagship data 
modeling tool. The big change 
in the early August release is 
the addition of support for six 
databases, including DB2, 
MySQL and PostgreSQL. The 
standard editions of Model- 
Right come in database-specific 
versions, while ModelRight 
Professional includes support 
for most major databases in a 
single edition. 

Tim Guinther, president and 
founder of ModelRight, said 
the new database support gives 
ModelRight broader appeal to 
enterprises. 

"The improved functionality 
in ModelRight 3.5 makes our 
tool even more valued in the 
database community," said 
Guinther. "Our users look to our 
product suite to help them effec- 
tively and rapidly develop data 
models, whether they rely on our 
products to reverse-engineer 
legacy systems or develop multi- 
ple databases for larger data 
warehousing projects." 

ModelRight costs between 
US$195 and $895, with the most 
expensive form including sup- 
port for all databases. There is 
also a free community edition 
that supports MySQL and Post- 
greSQL. Each version includes 
database-specific features. I 
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At the Enterprise Software 
Development Conference, 

choose from more than 70 classes and workshops 

The better the job you and your developer teams do, the better your company 
can compete, satisfy customers and thrive in today's economy. But with 
the tremendous number of platforms and ever-changing requirements, 
enterprise software development is more challenging than ever before. 
That's where the Enterprise Software Development Conference can help! 



STUDY with the industry's top faculty - all 
software development experts who will 
enlighten and inspire you. 

LEARN from more than 70 workshops and 
technical classes at ESDC - and stay on the 
forefront of software development. 



SHARPEN your skills across the entire software 
development life cycle, from requirements and 
modeling, to architecture and programming, to 
quality assurance, deployment and maintenance. 

MASTER the latest agile development 
practices and learn how to build better 
software, faster and more effectively. 



Attend ESDC and walk away with knowledge and skills that you can 
put to work immediately. 

Why ESDC is the ONE conference 
you should attend in 2010: 
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I You'll receive practical training on every 
aspect of enterprise software development. 
No ideologies, no religious wars: 100% practical 
knowledge. 

El Get a balanced view of all development 
1 methodologies, including traditional 
methods and the fast-evolving world 
of agile development, so you can see 
what's best for your organization. 

A BZ Media Event 



March 1-3, 2010 
San Mateo, Calif: 



El Every workshop and technical class you'll at- 
' tend at ESDC is tied to real-world enterprise 
development - techniques that are proven 
to work today. 

W\ You'll walk away with ideas, skills and knowledge 
that you can apply immediately - no matter 
your development methodology. 
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Sponsorships available: 
Contact David Lyman 
at 1-978-465-2351 or 
dlyman@bzmedia.com 
for details. 
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Where are the women and minorities? 



< continued from page 1 

ence, and 0.3% are women, she 
added. 

Over the past eight years, 
there has been a slight increase 
in women's enrollment on the 
undergraduate level, according 
to data compiled by Anthony 
Chow, an assistant professor at 
the University of North Caroli- 
na at Greensboro. 

"At the graduate level, how- 
ever, non-resident aliens 
become a major factor while 
minority enrollment in general 
plummets to very small per- 
centages," he added. 

Cuny added, "If this trend 
holds true, we will be unable to 
produce enough students for 
the jobs that are out there. 
Large segments of the popula- 
tion do not participate in com- 
puter science-related careers." 

Retention of minority 
employees is another issue. 
Nearly half of all minorities 
leave technology jobs to enter 
other occupations, said Nation- 
al Association for the Advance- 
ment of Colored People vice 
president Deborah Bey. 

Isolation is a key factor for a 
higher attrition rate among 
women and minorities, said 
Teresa Dahlberg, director of the 
Diversity in Information Tech- 
nology Institute at UNC Char- 
lotte. People tend to associate 
with "like communities," where 
people have similar backgrounds 
and interests, she explained. 

"If someone is the only 
woman or minority in a compa- 



ny, they will often not attract a 
peer group or informal mentor 
as easily as someone who is part 
of the majority. 

"There is a good amount of 
research that shows that women 
are judged more harshly than 
men, for hiring, evaluations and 
promotions," she added. "Vir- 
ginia Valian [author of "Why So 
Slow? The Advancement of 
Women"] shows this for women 
in science, technology, engineer- 
ing and math faculty jobs." Vir- 
ginia Valian is a professor at 
Hunter College. 

DIFFERENT PERSPECTIVES 

Alternate views on work could 
also be why minorities and 
women are not taking up 
careers in computer science, 
Dahlberg said. 

Many women and minorities 
are looking for work that is 
socially relevant and meaningful, 
Dahlberg explained. "Women 
are becoming doctors; it's not 
about being good at math, the 
technical rigor is the same. The 
big difference is that [medicine] 
is seen as a helping profession." 
Women are more represented in 
the sub-disciplines related to 
family and children, she added. 

Dahlberg believes that the 
social relevance attraction is 
different for minorities as for 
women. "I have had African- 
American men tell me that the 
only options that they thought 
they had growing up was to be a 
teacher or [a] preacher," 
Dahlberg said. "So, this might 



BIG BLUE PARTNERS WITH ACADEMIA 




IBM last month announced a partnership with 
Nicholls State University, under which Big Blue 
will help the university offer new curriculum in 
the university's information systems program 
that align with some of IBM's business initiatives. 

The curriculum will focus on jobs in emerging 
fields, including electronic medical records, intel- 
ligent transportation systems and smart energy 
grids, according to IBM. IBM has strategic initia- 
tives in each of those markets. 

IBM's Academic Initiative program works with 
colleges and universities worldwide, offering 
software for students' use in addition to online 
resources. 

Students will be able to enroll in IT service 
management classes in the fall 2009 semester. 
The program will adhere to the IS 2002 Model Cur- 



riculum and Guidelines for Undergraduate Degree 
Programs in Information Systems, which was 
developed by Association for Computing Machin- 
ery, Association for Information Systems, and 
Association of Information Technology Profession- 
als. Nicholls State is located in Thibodaux, La. 

"Nicholls is committed to building tomorrow's 
experts in IT today," said Neset Hikmet, a profes- 
sor of information systems at Nicholls State. 
"Working with IBM to incorporate IT Service Man- 
agement principles throughout our undergradu- 
ate, MBA and eMBA programs better prepares our 
graduates to help organizations use technology 
to intelligently respond to the global trends and 
disruptions affecting businesses, while also 
achieving a sustainable competitive advantage." I 
—David Worthington 



be more about a lack of role 
models. However, anecdotally, 
if you are an under-represented 
person in school or at work, 
doing work that helps others 
helps you to feel more engaged 
in your work." 

The roots of the problem may 
run even deeper, though. "Many 
women and minorities are being 
turned off in the fourth and fifth 
grade before they even know 
what computer science is," the 
NSF's Cuny said. "There are a 
number of things women don't 
understand about computing; 
they think they are insolated in 
front of a monitor." 

The U.S. education system 
is doing a bad job at counteract- 
ing stereotypes that program- 
mers are not part of a group 
effort, Cuny said. "Computer 



science is done in teams, and 
many teams have diverse opin- 
ions and backgrounds. It is not 
a solitary occupation at all." 

COUNTERING THE TREND 

Dahlberg suggested that em- 
ployers should emphasize the 
social relevance of their organi- 
zation's business mission, and 
how supporting that mission in 
IT can have a social impact. 
Life/work flexibility is also 
important to women, and 
recruiters should send women 
and minority technical people to 
do recruiting, she added. "No 
one wants to be the only one." 

Other techniques for recruit- 
ing employees include attending 
national events that aim to 
engage women and minorities; 
aligning with (or monitoring 



C r C++, Java most popular for open source 
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but C and C++ still have the 
largest base of code out there." 

Another language that is 
growing is SQL. Vescuso 
attributed its 1% growth to the 
widespread use of open-source 
databases. 

"I think it also reflects a shift 
toward platform-independent 
programming," said Vescuso of 
the results of Black Duck's data 
analysis. "The fact that develop- 
ers are using more Web-orient- 
ed languages and more script- 
ing languages reflects a desire 
to not be tied to any particular 
platform." 

This sentiment was also 
reflected by the fact that the 
largest drop in language usage 
was in shell scripts, used to write 
platform-specific programs. I 



HOW THE LANGUAGES RANK 



Language 


All Projects 
Share % 


12-Month 
Share % 


12-Month 
Gain/Loss % 


C 


40.91 


40.34 


-0.6 


C++ 


14.02 


13.43 


-0.6 


Java 


10.95 


10.29 


-0.7 


Shell 


8.96 




-1.9 


JavaScript 


5.55 




+2.1 


PHP 


4.86 


5.19 


+0.3 


Perl 


3.2 


2.43 


-0.8 


Python 


2.73 


2.63 


-0.1 


SQL 


1.6 


2.65 


+1.1 


C# 


1.24 


1.32 


+0.1 


Assembler 


1.23 


0.83 


-0.4 


Pascal 


0.91 


0.73 


-0.2 


Ruby 


0.78 


1.01 


+0.2 


TCL 


0.4 


0.28 


-0.1 



Ada 



0.39 



0.22 



-0.2 



The "All Projects Share" column shows the results for all open-source projects 
in the KnowledgeBase. Source: Black Duck Software 



C is the only language 

that has broken the 

billion lines-of-code barrier. 



66 /O of the code in open-source 
projects is C f C++ and Java. 

15 /O of the code in open-source projects 
is JavaScript and Shell. JavaScript is the 
only one of these languages gaining 
in share-up over 2 percentage points 
in terms of number of lines of code. 



More than one-third of projects with 

a release in the last 12 months included 

JavaScript, the most used and 

fastest-growing scripting language. 



news feeds on websites about) 
national organizations, to be 
informed of national and region- 
al opportunities to connect; and, 
similarly, aligning with regional 
colleges and universities with 
computing programs, she said. 

Mentoring and networking 
opportunities are important 
tools for retaining minority 
employees, in addition to train- 
ing and skills -building to build 
confidence, Dahlberg said. She 
also suggested allowing new 
hires to explore different posi- 
tions within an organization. 

One of the ways the NSF is 
working to counteract declining 
enrollments is with programs to 
transition high school graduates 
into computer science majors at 
college, as well as programs to 
motivate undergraduate stu- 
dents to remain in the field. 

STARTING EARLY 

The NSF's K-12 programs focus 
on informal education designed 
to spark student interest in com- 
puting by showing how comput- 
ers can solve problems through 
creating and manipulating rather 
than being used as mere tools, 
Cuny added. 

It is also working to infuse 
computer science in middle 
school and high school curricu- 
la and introduce a new 
Advanced Placement course for 
computer science. That effort, 
though, is being hampered by a 
shortage of computer science 
teachers, she said. 

"There are few computer 
science teachers in the country. 
Many have degrees in other 
fields, especially business," 
Cuny said. The NSF has set a 
goal for 10,000 more computer 
science teachers by 2015. I 
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Conferences put 
learning 'in your face' 

But in tight economy, balancing budgets against 
expanding brains is a tricky proposition 



BY ALEX HANDY 



J 



Technology conferences come 
and go, as do the budgets to 
send employees to them. 
When you get right down to it, 
though, conferences aren't about loca- 
tions and topics as much as they are 
about people. And while software 
developers are not generally known for 
their people skills, technology confer- 
ences are still some of the best places to 
learn new skills and brush up on the lat- 
est technologies. 

So how, exactly, do you choose where 
and when to send your developers to 
conferences? It can be tough to choose 
between sending your application archi- 
3Cts to a Gartner summit versus the 




option of saving said money and buying 
them books or online training. 

Fortunately, thanks to the Internet 
and the prevailing geek culture of our 
time, choosing between the budget and 
your employees' education isn't always 
necessary. 

If big events are off the table for your 
team, knocked off by big budget cuts 
and the current recession, there are still 
options left open. Most of these options 
are heavily dependent upon geographic 
location, however. Big cities tend to 
offer an array of interesting opportuni- 
ties. The bigger an urban area is, the 
more likely it is that there is a User 
Group of some sort (Linux, SharePoint, 



SQL) in town. If your company is near a 
sufficiently nerdy college campus, 
there's a chance that there is also a pro- 
grammers group there, likely aligned by 
language. 

Such groupings can never replace the 
in-depth technical knowledge available 
at a highly focused conference. But 
attending local meet-ups is a quick and 
easy way to get access to some big brains 
without any cash outlay. And while col- 
leges and off-hour enthusiasts aren't 
likely able to answer questions about a 
massive Oracle installation, you can't 
beat the price of admission. 

Alternatively, many urban areas 
have been seeing more unconferences 







u 



recently. Though the term "unconfer- 
ence" first appeared in 1998, the 
unconference movement really began 
four years ago. In 2005, a group of 
folks were left out of the super cool but 
ultra exclusive Friends of O'Reilly 
(Foo) Camp in Northern California. 
Rather than mourn their inability to 
get an invite to FooCamp, they created 
BarCamp. 

Members of the wiki company 
Socialtext offered up their Palo Alto 
offices on August 19, 2005, and numer- 
ous developers and IT enthusiasts 
camped out in this urban center, tents 
and all. For the next two days, Bar- 
Camp attendees discussed and present- 
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ed on a wide range of 

topics. And like a 

regular conference, 

corporate sponsors 

showed up to buy beer and coffee for 

all attending. 

UNCONFERENCES 

The principle behind an unconference is 
fairly simple: Content comes from atten- 
dees. Whiteboards are hung and a 
schedule of talks is improvised by atten- 
dees on the spot. Some events even 
mandate that attendees must give a 
short presentation on some area of 
expertise in order to attend. 

Unconferences have begun to spread 



to other events. The annual 
Office 2.0 conference in San 
Francisco is now preceded 
by one day of unconfer- 
ence. JavaOne was 
flanked by Community- 
One this year, a somewhat more orga- 
nized but still free conference in a hotel 
one block from the main show. 

In times of financial strife, such an 
event could even be built within your 
organization: If you can't send your 
folks to the conference, you could 
always open your meeting rooms, buy 
some pizza and beer, and throw your 
own unconference. 

Alternately, the online conference is 



now a reality. While Webinars and 
screen-sharing sessions are already 
commonplace in many enterprises, 
there are also events that string such 
meetings together online. CodeGear 
has already held four such conferences, 
and according to David Intersimone, 
vice president of developer relations at 
CodeGear, the events are just as useful 
as a real conference. 

Intersimone said the primary differ- 
ence between CodeGear's virtual con- 
ferences and real conferences is "more 
attendance across the planet versus 
local/regional attendees at live events." 
He added that, "with the economy and 
travel budget reductions, more develop- 
ers can attend an online conference than 
can travel to a face-to-face conference. 
What is missing is the human touch, the 
close face-to-face interactions that you 
can't do in a. . .virtual conference." 

Unfortunately, that is a big omis- 
sion. Steve McConnell, CEO and chief 
software engineer for Construx Soft- 
ware, said that good conferences are 
all about the personal connections. 
McConnell said the elements that 
make a great conference are "great 
speakers, great topics (and they don't 
always go hand in hand) and good par- 
ticipants, so you end up with good hall- 
way conversations." 

Intersimone agreed, and said that the 
most important things at a conference 
are "the speakers/presenters — what you 
can learn from them that you can't learn 
by reading and watching things on the 
Internet. Everyone wants to learn 
directly from Grady Booch, Scott 
Ambler, Bruce Eckel, Steve McConnell, 
etc." He added that the audience is 
almost as important, however. 

Intersimone said that good confer- 
ences are also about "the networking 
with speakers and attendees. You learn a 
lot more by talking with other develop- 
ers about common problems, best prac- 
tices and new ideas." 

Tim Bray, director of Web technolo- 
gies at Sun Microsystems, said, "For me, 
the big deal is face-to-face contact with 



individual people and deep dives on 
interesting new technologies. That face- 
to-face comes in two flavors: First, 
there's someone specific you need to 
work out something specific with, 
maybe something unusually complicat- 
ed or tense that needs face-to-face. The 
second flavor is just random talk, meet- 
ing new people, catching up with old 
friends and colleagues." 

COMING BACK FOR MORE 

And at the end of the day, that could be 
one of the biggest draws for attending a 
conference. Returning to a show that 
you've attended and liked in the past is a 
great bet in this economy. If the speak- 
ers and attendees made that show your 
favorite of last year, there's no real rea- 
son not to place it at the top of your list 
for the current year. 

While conferences can fluctuate in 
quality from year to year, if the same 
people are attending, face-to-face discus- 
sions will be easier to get into, even if you 
and your team are the introverted sort. 

In general, the best way to gauge the 
quality of a conference is to have attend- 
ed it before, or by watching previous 
talks online if they are available. Your 
own personal networking skills should 
be able to give you an idea of who is 
attending beforehand, provided you've 
sent some e-mails to people you've met 
at previous incarnations of the show. 

"Since I'm a programming tools guy 
and a Web guy, and thus an open-source 
guy, I gravitate to conferences where 
people with parallel obsessions gather," 
said Bray. 

"I'm not sure why this is, but I tend to 
find the crowd most congenial and the 
technology most stimulating at confer- 
ences that have a programming-lan- 
guage theme: OSCON (started life as 
the Perl conference and still has that fla- 
vor), Ruby conferences (Rails less so), 
JavaOne, and so on. As to what, in gen- 
eral, makes them worth attending: No 
product pitches, presentations that 
stretch my mind, and a high density of 
people with whom I'll enjoy speaking." I 
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FROM THE EDITORS 

Security goes mainstream 

Over the past decade, a variety of security software tool makers were 
fighting to get the message out about the importance of secure 
development, but only achieved modest uptake. The torch has passed 
through acquisitions to big names, including Hewlett-Packard and IBM, 
and we hope that will bring security further into the mainstream. 

Companies like SPI Dynamics (acquired by HP), Ounce Labs and 
Watchfire (both acquired by IBM) raised the level of the art, and were 
widely heralded as innovators. 

Those companies, and others as well, made a business out of security 
when security was glazed over as an afterthought by many developers, 
and often ignored by managers, who considered security an IT issue best 
solved by firewalls. The tools and best practices that the software-securi- 
ty firms produced resulted in safer, higher-quality software. 

Yet in spite of their rigorous efforts, those niche companies failed to 
bring their message (and tools) to the masses. Mass adoption usually 
requires a bigger player. HP and IBM can help weave security into the 
software development life cycle. 

Incorporating technology from security software companies into a 
larger stack is a good thing — provided non-customers can still use those 
tools independently. We would like to see the innovation continue and 
want all developers to benefit from robust security tools regardless of 
what development stack they use. 

The indications are positive, so far. IBM's strategy integrates Ounces 
technology through Web applications and for the full application life cycle. 

Likewise, HP's Application Security product for Web applications 
keeps the SPI Dynamics heritage intact. HP has also integrated the tech- 
nology with its tool chain. 

Those integrations are okay when the security tools are not locked into 
a particular platform. Many security software makers already work close- 
ly with the big platform providers anyway. 

Platforms big and small are equally vulnerable to security defects. 
Tools can go a long way toward making software more secure no matter 
what stack it was developed with. 

A lack of security is a problem that is shared by the entire industry. It 
would be counterproductive for big software companies to lock down 
their own stacks at the expense of customers. We hope that they con- 
tinue to do the right thing and respect that enterprise IT is full of het- 
erogeneous systems. 

Embrace, extend diversity 

We applaud the efforts of the National Science Foundation and its 
partners to diversify the racial and gender profile of computer sci- 
ence workers. It's a good start, but not enough. We want to see more 
progress made to stave off a labor shortage. Corporations, open-source 
organizations and individual developers must become more engaged. 

Diversity helps businesses produce products that have broader appeal, 
and it is the socially responsible thing to do. It is also necessary to recruit 
from the entire population; when women and minorities reject a career 
in software development, our profession suffers. 

So do our companies. The U.S. Bureau of Labor Statistics forecasts a 
dwelling demand for programmers, but the profession does not appeal. 
There are few computer science majors, and even fewer of those stu- 
dents are women and minorities. 

The lack of diversity is a serious problem for companies that need to 
hire qualified workers to compete in a global market. Corporations must 
do more with the resources that they have. Smaller businesses can attend 
career fairs and partner with local universities; resources are available 
online to locate job seekers. 

But solitary efforts won't put a dent in this problem. Let us work to 
change our culture to celebrate diversity — whether it is a diversity of 
interests, or gender and racial differences. I 



SHORT TAKE 




"DEVELOPERS," said my friend Mac, 
"are really bad at guessing how long it 
takes to write software." Michael "Mac" 
McCarthy and I go back to the mid- 
1980s. What Mac likes to do most, 
beyond enjoying a fine Chardonnay and 
talking politics, is making observations 
about the world of technology. While 
he's not a programmer himself, he has 
worked closely with them for years, and 
has managed many software projects at 
media companies and startups. 

Over the course of a delicious lunch 
at Harry's Hofbrau in Foster City, Calif., 
Mac shared some good stories about his 
experiences with corporate develop- 
ment teams. As part of that, he stated 
some principles that, with his permis- 
sion, I've repackaged and labeled as 
"McCarthy's Four 
Laws of Software 
Estimation." 

The First Law: 
If you ask a devel- 
oper for a project 
estimate, and if he 
thinks the project is a good idea or 
would pose an interesting challenge, 
then he'll say "three weeks." 

The developer has no idea how long 
it will take, but "three weeks" sounds 
encouraging enough that you'll probably 
go ahead with the project. 

The Second Law: If you ask a 
developer for a project estimate, 
and if he thinks the project is a bad 
idea or wouldn't be fun to work on, 
then he'll say "six months." 

The developer still has no idea how 
long it will take, but "six months" sounds 
negative enough that you'll probably say 
"never mind." 

The Third Law: Whether the 
developer estimated "three weeks" 
or "six months," if the project pro- 
ceeds it actually will take a mini- 
mum of nine months. 

That's because, Mac says, developers 
are bad at software estimation. 

The Fourth Law: When asked 
why the project is behind schedule, 
the developer will blame inadequate 
or incomplete specifications. 

What's your experience: Are develop- 
ers good or bad at project estimation? 
Do their estimates vary depending on 
whether they like your idea or not? 
Write me at feedback@bzmedia.com. 
— Alan Zeichick 

WITH ITS ACQUISITION of Spring 
Source in August, VMware made its first 
"Big Tech Company" move. 

Almost a month to the day after Sun's 
final moments, VMware seems to have 
stepped up to fill the hole left by 
Oracle's purchase. SpringSource expands 
VMware's market exposures and can be 
seen as an end-run around operating sys- 
tem vendors, like Microsoft and Red Hat. 
With SpringSource under its belt, 
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VMware can finally deliver those bare- 
metal systems they've been talking about 
for years: systems where applications are 
run alone, with no OS to get in the way. 

While VMware has 
been talking about 
this kind of move 
for years, it appears that 
they've chosen Rod Johnson and 
his team to actually build out the soft- 
ware necessary. And as developers go, 
you really couldn't pick a better man. 

— Alex Handy 

APPLE NEEDS TO BE more transpar- 
ent about security. It is reminiscent of 
the old Microsoft — secretive and lacking 
a holistic approach to secure develop- 
ment. 

The iPhone OS 3.0 firmware update 
was loaded with fixes for security vulner- 
abilities that we not released out of 
cycle. Recently, there have been back- 
to-back massive security updates for OS 
X. Black Hat conference attendees 
chuckled at its security. Apple must take 
security more seriously and get ahead of 
the curve. As its systems become more 
popular, it will lose the luxury of being a 
small target. — David Worthington 

A RECENT INTERVIEW with Share 
Point development guru Robert Bogue 
resulted in an interesting side-discussion 
of the state of the art of software devel- 
opment versus the state of the industry. 

The state of the art, he said, includes 
such potential best practices as unit test- 
ing, agile development, test-driven 
design, peer code review and more. We're 
told by software vendors, analysts and 
pundits that this is what developers need 
to be doing. Yet, Bogue noted, "When I 
talk to folks here in Indiana, they're lucky 
if they can get their stuff to compile." 

That's not a slam at the fine folks of 
Indiana; it's more of a comment on what 
in place is a wide disconnect between 
what software vendors and analysts are 
promoting and where working program- 
mers are. — David Rubinstein 

I HAVE A CONFESSION to make This 
is a bit difficult for me to say, and I'm not 
sure if I'll be able to show my face 
around here again. But here it goes... 

I don't have a mobile device. 

There, I said it. I am still living in the 
Stone Age with my Sprint- Samsung cell 
phone, equipped only with a 1-9 num- 
ber pad, camera, and other features that 
are mere child's play to users of Black- 
Berries and iPhones. I do not check 
e-mails and the Internet on my phone. 
I do not communicate with satellites. 
I cannot fire lasers at Stormtroopers. 

But one day I will get one. Very soon, 
I'll come running down the street shout- 
ing, "Hey, I got the new Supersonic 
Mobile 3000X. It can realign the solar 
system ! " — Jeff Feinman 
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The future of testing 



What if testers were able to some- 
how work ahead of developers? I 
don't mean agile testing, I mean antici- 
pating builds and developing solid test 
plans well ahead of time. What if instead 
of developers sending builds to testers, 
and testers sending bugs to developers, 
we had testers sending automated tests 
to developers, and developers shipping 
products when those tests 
passed on a candidate build? 
If we had all this, we would be 
looking at the future of testing. 

You are probably thinking 
that this is completely unfeasi- 
ble. How could we possibly 
get all of the testing automat- 
ed in time to give to the devel- 
opers while they are still creat- 
ing the features? Or you might 
be thinking that this is crazy, 
because you can't trust developers to 
release the product themselves! But 
bear with me. Let's consider the funda- 
mentals of this concept before we start 
to deal with the issues. 

In this new process, things get very 
efficient. Testers spend their time 
designing great tests. Since that is all 
they are doing, they are going to produce 
more tests with better coverage. Devel- 
opers are going to be a lot more efficient, 
too. They have tests to tell them immedi- 
ately when they break something, rather 
than dealing with the vagaries of bug 
reports that come much later. 

In most cases, test failures are much 
easier for the developer to analyze given 
their understanding of the recent code 
changes. The most important thing in 
this process is the absence of any "loop- 
ing." We eliminate the expensive process 
of bug fixes requiring new builds that 
then need to be re-tested, producing 
new bug fixes, and so on. The product is 
ready to release when all of the tests 
have been completed and when all of 
those tests pass. 

Also, this new process workflow 
could solve a common challenge for 
many organizations. QA testers often 




lack sufficient knowledge or under- 
standing of how the features that they 
will be testing should work. As a result, 
the majority of test development occurs 
after QA finally gets to see the feature in 
action from an early build. In theory, 
they should be able to build a solid test 
plan — and test cases — from the specifi- 
cation provided by the developers and 
use cases from product man- 
agement. However, this 
rarely happens: Either the 
spec changes or the testers 
are not knowledgeable 
enough to anticipate testing, 
so they wait. 

Given all this, what would 
it take to make this process 
feasible? 

1. You must be able to auto- 
mate all tests. 

2. You must be able to automate tests 
without having the product/feature 
available. 

3. You must be able to automate in less 
time than it takes to develop the prod- 
uct/features. 

4. You must be willing to change. 

Let's take these one at a time. 

Is it feasible to automate all tests? 
Perhaps not (although that might be an 
interesting debate). Nevertheless, let's 
suppose that you can automate 95% of 
your testing. Your team can then handle 
that last 5% using a smaller ancillary 
process. 

Is it feasible to automate feature- and 
system-level tests without having access 
to the product? Theoretically, yes. But 
we know that in practice one must 
debug automated tests much like one 
debugs software. So the absence of a 
real working version of the product or 
feature is problematic. However, certain 
virtual technologies now make it possi- 
ble to emulate the behavior of a system, 
so you can specify how a device will 
respond and therefore debug your test 
case in advance of having access to the 
final product or feature. 

Can test automation happen ahead of 



Seeking efficiency 
with private clouds 

Almost half of companies that plan on 
deploying a private cloud in the next year 
believe the biggest benefit will be 
improved efficiency, according to 
research from the International 
Supercomputing Conference, which 
took place in June. One hundred 
and three executives were surveyed. 
At right are all the reasons why 
companies will be adopting 
private clouds: 

Source: International Supercomputing Conference 
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development? The answer is definitely 
yes. Automated testing tools can dramat- 
ically accelerate the process of automa- 
tion to the point where the first few tests 
on a new feature can be in place in a 
matter of hours. Additional tests extend- 
ing that coverage can be developed in 
parallel as development proceeds, 
ensuring that the developer always has a 
good set of tests to work with. 

By moving automated testing ahead 
of development, organizations stand to 
benefit by eliminating looping between 
QA and developers. Today, developers 
test features with a positive use in 
mind — that is, they test simply to prove 
that a feature works as designed. QA 
teams, on the other hand, conduct nega- 
tive use tests to see how the feature 
responds when users use it incorrectly. 

In the standard workflow, tests flow 
from development to QA — first positive 
use, then negative use — which leads to 
looping when defects are found. Howev- 
er, if QA testers provided developers 
with automated negative use tests, 
developers could then run both types of 
tests and avoid looping. This would save 
developers as well as testers consider- 
able time and effort. 

To implement this change to the 
workflow, testers and developers need a 
technology that enables them to easily 
transfer, understand and run tests. The 
resulting asset sharing would not only 
eliminate looping, as mentioned earlier, 
but also lead to efficiencies throughout 
the workflow. For example, QA testers 
would be able to pass on automated tests 
to developers; developers would lever- 
age these tests to conduct feature/unit 
testing; and then developers would pass 
these semi-automated tests to the 
automation specialists. Automation spe- 
cialists could easily leverage these semi- 
automated test cases (they might not 
have pass/fail criteria) for regression-val- 
idation testing, eliminating the need to 
decipher written test plans or build 
automated tests from scratch. 

Will organizations change their 
processes? I understand that these kinds 
of changes don't happen quickly. But 
these changes will come. As with the 
advent of agile development, making 
this change requires business drivers 
and technology enablers, both of which 
exist in the form of market pressures and 
automated testing tools. The early 
adopters will be those who feel the 
greatest pain and are willing to take 
some risks to change. Others will follow. 

The future of testing is really about 
stepping outside our comfort zones and 
helping developers and testers work 
together in a new and improved way. It's 
about being innovative behind the 
scenes and rethinking familiar processes 
in order to deliver higher-quality prod- 
ucts to market faster. I 

Kingston Dujfie is founder and CTO of 
Fanfare Group, which provides software 
quality assurance products and services. 
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SharePoint Comes Back 
to San Francisco 



Registration Now Open! 



Attend 
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SPTechCon 

The SharePoint 
Technology Conference 



Feb. 10-12, 2010 -> San Francisco 



After successful sold-out events in San Francisco and Boston this 
year, the SharePoint Technology conference returns to San Francisco 
in 2010. Reserve your place at the biggest independent SharePoint 
conference of the year! 

SPTechCon features more than 70 classes and workshops to teach 
how to take full advantage of SharePoint, from content management 
to search to backup and much more! 

For more information, go to 

www.sptechcon.com 



■ New to SharePoint? 

■ Have some experience, 
but are looking for more? 

■ An advanced user looking 
to master SharePoint? 

If you answered "yes" 
to any of these questions, 
then SPTechCon is for you! 



"Excellent instructors 

and great course selection. 

This is a must-attend." 



Bob Walter, Systems Administrator, Porter Novelli 



Patrick McMahon, Web/IS Architect,SEPATON, Inc. 
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Jon Gebarowski, Web Development Manager, 
SeaChange Int'l 
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Joel Dylhoff, Systems Architect, Ashley Furniture 
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Open-source hosts with the most 



Cool! You have a hot idea for an open- 
source project. You're ready to start 
designing and, you hope, coding immedi- 
ately afterwards. You know others tuned 
into your vision, and you hope you can get 
some of them to help you code. But 
where are you going to host that project? 
There are more choices than ever; choos- 
ing well now will help you later — espe- 
cially if your project becomes popular. 

The primary hosting options can be 
segregated into two groups: those with 
lots of requirements, and those with few. 
Let's look at these, starting with ones 
that have stringent requirements. 

At the top of the list is the Apache 
Software Foundation (ASF) at 
apache.org. It hosts only a few projects, 
but ones that matter and that frequently 
have a large following. In my recent 
interview with ASF president Justin 
Erenkrantz, he stated, "For a project to 
apply, it generally requires three active, 
regular contributors." Even if it qualifies 
on that score, it must still go through an 
incubation and review phase before it 
becomes a fully accepted project. In 
exchange, the ASF provides hosting, a 
legal framework, considerable exposure 
and undeniable cachet. 

Another elite host is Codehaus, at 
codehaus.org. Here, too, projects must 



apply and be reviewed based on various 
criteria, including code quality. It's not a 
host of first resort, as it expects projects 
to have an existing codebase. Many pro- 
jects it hosts are tools that are of interest 
to developers: Groovy, Grails, JRuby, 
Drools, PicoContainer and more. In 
exchange, Codehaus provides free access 
to tools from Atlassian and 
IntelliJ, among others. And it 
gives your project prestige. My 
only complaint is the numer- 
ous advertisements on the pro- 
ject pages. 

The final member of the 
picky troika is Tigris at 
tigris.org, which 

is hosted by CollabNet, the 
same folks who bring the 
world Subversion. My own 
OSS project, Platypus, has been hosted 
there for several years. Tigris looks for 
projects for "tools for collaborative soft- 
ware development." 

Of the hosts mentioned so far, Tigris 
provides the least support. No special 
tools, and its bug tracking and mailing list 
software are home-grown products with 
an unremarkable set of features. Increas- 
ingly, I find myself eyeing other hosts in 
search of better tools for the project. 

In the accept-all-comers camp, no one 



Integration Watch 




is bigger than SourceForge (sf.net). 
SourceForge provides good home-built 
tools, good data, and most importantly, a 
large, thriving community. Because of its 
sheer size, when people are looking for 
an OSS tool without knowing the name of 
one, they will often query SourceForge 
before checking anywhere else, so pro- 
jects can get greater exposure 
there. The company also puts 
out a newsletter and regularly 
holds contests to highlight 
projects. However, it adds 
more than 100 projects per 
day, so it's a big crowd filled 
with numerous completely 
dead projects that seemingly 
are never, ever removed. 
SourceForge also runs ads on 
project pages. 
Google Code (code. google 

.com/projecthosting) is a new host that 
provides a stripped-down service. There 
are few ways to modify a site or distin- 
guish one project from another. When I 
spoke with Google Code representatives 
at this year's excellent OSCON confer- 
ence, they seemed puzzled that someone 
would want to change the look, and they 
could not show me how it was done. 
Unfortunately, the default look is the least 
attractive of the hosts mentioned here. 



Project Kenai (kenai.com), hosted by 
Sun, is a recent entrant. It has numerous 
appealing qualities. First of all, its defect 
tracker is Atlassian JIRA, which is wide- 
ly considered the best product of its 
kind. Along with SourceForge, Kenai is 
the only host in this list to provide sup- 
port for these SCM tools: Subversion, 
Git and Mercurial. 

Only it and Google Code provide a 
wiki page. And it's one of the few hosts 
that does not require an OSI-approved 
open-source license. Given my recent 
column on how many OSS projects don't 
use OSI licenses, ("The need to expand 
open-source licensing," July 15) this is 
an important and rare benefit. My one 
concern is the fate of Kenai after the 
Oracle acquisition of Sun. 

There are other free project hosts, 
some specialized, such as Microsoft's 
CodePlex; others that serve primarily for- 
eign countries (BerliOS); cater to specific 
languages (JavaForge, LuaForge, Ruby- 
Forge); or are communities for certain 
products (GitHub, Launchpad). A com- 
plete list can be found on Wikipedia. 

The important thing is that if you're 
not a candidate for one of the exclusive 
hosts, then choose the generalist carefully. 
You don't want to be migrating your pro- 
ject to a different home anytime soon. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
hinstock.hlogspot.com. 




Here Today. Gone Tomorrow. 



Do your potential customers worry about YOU? 



Buying tools and solutions is already a leap 
of faith. And the last thing a development 
manager wants is to be burned by having 
a software vendor go out of business. 
Before you make the sale, you have to earn 
your customer's trust that you'll deliver what 
you promise and that you'll still be around 
to provide service and support. 

And in a recession, trust and 
confidence in a supplier are more 
important than ever. 



How do you build that trust? How do you assure 
potential customers that you are in business 
for the long haul? The answer is regular print 
advertising in a trusted medium like SD Times. 
For nine years, BZ Media's SD Times has built 
a trusted relationship with its readership of 
software development managers, architects 
and team leaders — trust that naturally rubs 
off on our advertisers. 

Your customers are looking for someone they 
can trust. You should too. Call SD Times today. 
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Contact David Lyman, Publisher, 
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However you get there, get there 

Because some events are just too important to miss 

Cybersecurity threats are recession-proof. Even in challenging times you can 
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The ultimate in software development 



In the sport of Ultimate (a game often 
associated with Frisbee-brand flying 
discs), everyone on the field more or less 
does the same thing: running around 
trying to beat the opposing coverage, 
catching the disc, and throwing it to an 
open teammate. While there is some 
specialization of roles (tall people down- 
field, strong throwers back), and endless 
tactical variations, over the course of a 
game everyone does everything. In 
modern software development terms, 
Ultimate is a sport of "collective owner- 
ship." (I suppose I could have used the 
less-familiar sport of "Basketball" as my 
example, but I didn't want to be 
obscure.) 

Sailboat racing is also a team sport, 
but one where roles are paramount. 
Crewmembers have stations at which 
they perform specialized duties 
throughout the race. The specifics of 
their duties change as the boat sails in 
different relations to the wind, but the 
person working the foredeck is never 
going to come back and take the tiller. 
While the skipper of the boat has the 
privilege of command, individual crew 
are expected to perform their roles 



without micromanagement. And while 
you might mention once that the jib 
seems slightly over-trimmed, if the 
trimmer doesn't let it out, that's his 
prerogative. 

It's not that sailing a boat requires 
tremendously specialized knowledge; 
everyone onboard is likely to 
be at least a fairly good sailor. 
So while a boat might initial- 
ly appear to follow the "surgi- 
cal team" structure discussed 
in "No Silver Programmers" 
(Feb. 15, 2008), the special- 
ization on a boat in fact has . 
more to do with practical \ 

issues of movement and 
response time. 

Boat trim is extraordinari- 
ly dynamic; beyond the obvious 
caprices of wind and current, the 
geometry of the rigging is a study in 
tension, and every adjustment shifts 
vectors that amount to changes in boat 
speed that are as often intuited as per- 
ceived. 

Crews can work together effectively, 
though, because a boat is, in the jargon, 
very "transparent." The rigging towers 



above everyone, and adjustments gener- 
ally involve the ratcheting of winches, 
the groaning of masts, and the occasion- 
al banging and swearing. In software 
development, the analogous situation 
might be one where the continuous inte- 
gration (CI) server provides team-wide 
feedback. 

I believe Alberto Savoia 
was the first to hook a CI 
server to a lava lamp. While 
t obviously amusing, Savoia's 
explicitly-stated goal was 
"extreme feedback" in the 
: service of productivity. I don't 
^ff I know if it works; I've never 
hacked a lava lamp and, as I 
almost exclusively work with 
distributed teams, we'd have 
to build several and ship them around 
the world. 

I'm still soul-searching over Tom 
DeMarco's admonition against metrics 
("Is Tom DeMarco losing control?" 
August 15, 2009), but we ought to 
make a distinction between feedback 
(yay!) and metrics-for-control (boo!). If 
a measurement provides guidance in 
near-real time, surely it's worth some 
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minor amount of effort. The transient 
nature of a lava lamp blob or the sound 
of a jib luffing is also a difference 
between feedback and a metric-for- 
control: Everyone notices, sure, but 
one doesn't have to worry about a 
graph suddenly appearing at a perfor- 
mance review. 

It seems to me that a racing crew 
achieves control over a complex system 
better than does a team of Ultimate 
players. On the other hand, the "collec- 
tive ownership" of an Ultimate team 
allows for an individual to contribute 
his or her absolute maximum amount; if 
one feels that he or she can make the 
difficult throw or outrace the defender, 
they are free to try. 

In a software team, the only work- 
able way to combine transparency and 
collective code ownership is to have a 
solid automated test suite. With a test 
suite, everyone ought to feel free to try 
to improve every aspect of the system 
and can do so with the knowledge that 
in the face of failure, you can roll back 
the change and try again. 

If only boats and discs were as for- 
giving. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 
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Bottom line: dtSearch manages a 
terabyte of text in a single index 
and returns results in less than a 
second" — InfoWorld 

dtSearch "covers all data sources 
... powerful Web-based engines" 
— eWEEK 

"Lightning fast ... performance 
was unmatched by any other 
product" — Redmond Magazine 

See www.dtsearch.com for 
hundreds more reviews, and 
hundreds of developer case 
studies 
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Changing requirements, changing skills 



Industry Watch 



Software requirements change. 
That's a fact. You can deal with the 
changes as they occur, or you can be 
blind to the changes and put off the new 
requirements until the next big release 
of the software. "Many organizations are 
stuck in traditional cycles, due to bud- 
geting and wanting to know what to 
expect," opined Mary Gerush, an analyst 
with Forrester Research. 
"Their planning is on an annu- 
al cycle: T want this function- 
ality, at this cost, at this time.'" 

Meanwhile, organizations 
that choose to accept the fact 
of changing requirements, and 
that want to deal with them as 
they occur, are looking to 
more iterative approaches to 
development. But how do 
they achieve a more agile 
approach? Gerush said that many organi- 
zations already have a valuable asset in 
place that can serve as the enabler of this 
kind of shift: the business analyst. 

The best business analysts have a sol- 
id grounding in both business and IT, 
regardless of where they report in the 
organization. Yet they often are under- 
appreciated, said Gerush, who wrote a 
report called "Your 2009 Business Ana- 
lysts: Know Them to Grow Them," 
based on a survey done by Forrester and 
the International Institute of Business 
Analysis. "There is increased under- 
standing and recognition for project 
management, [and] developer and test- 
ing certifications, but we haven't yet 
seen it with business analysis and 
requirements engineering." 

Only now, she said, are organizations 
starting to bring business analysts 
together, sometimes through a centers- 
of-excellence training model. "There's a 
discipline around BA. There's a lot more 
to it than simply gathering require- 
ments." 




Along with their detailed knowledge 
of the business and the underlying tech- 
nology that supports it, business analysts 
are able to communicate to both sides 
of the house equally, with clarity, and to 
listen and be empathetic to the prob- 
lems each might face. It's these "soft 
skills" of communication, customer ori- 
entation and collaboration that are seen 
as most valuable. 

In the survey, business ana- 
lysts rank written communica- 
tion skills as the most critical, 
followed by analysis, oral com- 
munication, collaboration and 
facilitation. "Current business 
analysts view their role as one 
that should provide strategic 
guidance and planning sup- 
port as opposed to just per- 
form the tactical 'gathering' of 
business requirements for individual pro- 
jects," Gerush wrote in the report. 

Ninety-five percent of the business 
analysts responding to the survey ranked 
leadership skills such as team building 
and planning as important, while 87% 
indicated strategic planning and vision- 
ing were important. 

Knowledge of business process mod- 
eling and business rules design were also 
ranked as important, supporting the 
view that business and technology have 
converged and that the invisible wall 
that separated the two sides is coming 
down, the report said. 

Requirements, though, happen dif- 
ferently in an agile development model. 
"They go an inch deep and a mile wide, 
and then each iteration goes into more 
detail," Gerush explained. "There's not 
the big sign-off up front, before devel- 
opment begins." 

Some would argue that in an environ- 
ment where requirements change so 
rapidly, a business analyst isn't needed, 
as there is no huge requirements docu- 



ment to create, and no lengthy meetings 
to define the scope and depth of a soft- 
ware project. 

Agile development, Gerush said, 
requires more casual forms of documen- 
tation, and more visual forms and proto- 
types. User stories replace a thick 
requirements document, and the process 
of definition is more collaborative. 

"Business analysts can help organiza- 
tions become more agile with a little 
recognition that the traditional way we 
elicit, define and manage change does- 
n't work," Gerush noted. "The skills 
business analysts have are a good fit to 
be creative and analytical to pull togeth- 
er requirements in a pragmatic and effi- 
cient way." 

The report recommends that organi- 
zations improve their analysis practices, 
educate themselves about requirements 
definition and management, and pro- 
vide training in communication and 
facilitation. 

Further, organizations must find a 
way to provide business analysts with 
advancement, but not by moving them 
into another role. The findings show that 
analysts like being analysts, and they 
don't want to be on some career path 
that will move them away from what 
they want to do. They often simply want 
increased respect and pay. 

Finally, expose business analysts to 
new technologies and different business 
units, and cross-train them in skills such 
as project management and quality 
assurance. 

The alternative, Gerush said, is to 
remain stuck in traditional cycles, where 
quality software can be done, but which 
often does not meet the new needs of 
the organization that cropped up while 
the project was in development. I 

David Rubinstein is editor-in-chief of 
SD Times. 
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Nokia has changed the name of the Qt Software application and Ul 
framework to the Qt Development Framework in an attempt to 
increase the use of Qt by mobile developers, according to the com- 
pany. Nokia acquired Qt when the company brought in Norwegian 
company Trolltech in June 2008. The new website for the Qt 
Development Framework is qt.nokia.com . . . Intel has acquired the 
Cilk++ platform, which tries to let C++ developers exploit multicore 
processors. Intel will bring in the entire development team and 
technology behind Cilk++, which was created by Cilk Arts. Cilk++ 
provides a set of extensions for C++ and a runtime system for mul- 
ticore-enabled applications. 

EARNINGS: VMware reported revenues for its second quarter of 
2009 at US$456 million, flat from the second quarter of 2008. 
Non-GAAP operating income for the second quarter was $96 mil- 
lion, a decrease of 14% from the second quarter of 2008. GAAP 



operating income for the second quarter was $38 million, a 
decrease of 38% from the second quarter of 2008. U.S. revenues 
for the second quarter declined 3% to $234 million from the sec- 
ond quarter of 2008. International revenues for the second quar- 
ter grew 3% to $222 million from the second quarter of 2008 . . . 
Google reported revenues of US$5.52 billion for the second quar- 
ter ended June 30, 2009, an increase of 3% compared to the sec- 
ond quarter of 2008. Operating income for the second quarter of 
2009 was $1.87 billion compared to operating income of $1.58 bil- 
lion in the second quarter of 2008. Net income for the second 
quarter of 2009 was $1.48 billion as compared to $1.25 billion the 
same quarter a year ago . . . Intel announced revenues for the sec- 
ond quarter of 2009 of US$8 billion, down $1.4 billion from the 
same quarter a year ago. Operating income was $1.4 billion in the 
second quarter. The company predicted revenues for the third 
quarter to be $8.5 billion and capital spending to be $4.7 billion. I 



EVENTS CALENDAR 



Red Hat Summit 
SJBoss World 

Chicago 

RED HAT/JBOSS 

www.redhat.com/promo/summit/2009 



Sept. 1-4 



ESC Boston 

Boston 
TECHINSIGHTS 

esc-boston.techinsightsevents.com 



Sept. 21-24 



Intel Developer Forum 

San Francisco 
INTEL 

www.intel.com/idf 



Sept. 22-24 



Software Business 2009 Sept. 29-30 

San Diego 

WEBCOM COMMUNICATIONS 

www.softwarebusinessonline.com 



XML-in-Practice 2009 Sept. 30-0ct. 1 


Washington, D.C. 




IDEALLIANCE 




www.idealliance.org 




Adobe MAX 


Oct. 4-7 


Los Angeles 




ADOBE 




max.adobe.com 




VSLive Orlando 


Oct. 4-7 


Orlando 




1105 MEDIA 




vslive.com 




Oracle OpenWorld 


Oct. 11-15 


San Francisco 




ORACLE 




www.oracle.com/us/openworld 




Zend/PHP Conf. 


Oct. 19-22 


San Jose 




ZEND TECHNOLOGIES 




www.zendcon.com 




SharePoint Conf. 2009 


Oct. 19-22 


Las Vegas 




MICROSOFT 




www.mssharepointconference.com 




Software Test 


Oct. 19-23 


& Performance Conf. 




Cambridge, Mass. 




STP COLLABORATIVE MEDIA 




www.stpcon.com 




Web 2.0 Summit 


Oct. 20-22 


San Francisco 




O'REILLY MEDIA 




www.web2summit.com/web2009 




ARM TechCon3 


Oct. 21-23 


Santa Clara 




RTC GROUP 




www.armtechcon3.com/2009 




00PSLA 


Oct. 25-29 


Orlando 




ACM SIGPLAN 




www.oopsla.org/oopsla2009 




Cloud Computing Expo 


Nov. 2-4 


Santa Clara 




SYS-C0N 




www.cloudcomputingexpo.com 





Visualization Conf. & Expo Nov. 2-4 

Santa Clara 
SYS-C0N 

www.virtualizationconference.com 

For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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A LEADER IN REPORTING 




THAT WORKS 



j with Java or .NET, access virtually any 
database, and publish to the Web with support for Firefox, 
Safari, and Internet Explorer. 



WITH THE LATEST INNOVATIONS 



ips, manage 

dashboards and reports on a single server, and share 
interactive reports affordably via new licensing options. 



TEST DRIVE IT TODAY: 



;rystalreports/dev 
or contact us at 1-888-333-6007. 
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Advanced Digital Dashboards Require 
ced 





Dund 

Data Visualization 




Fully Optimized For Visual Studio 2008! 

With new releases always in the pipe - including exciting .NET add-ons like our new Silverlight extension - Dundas gives you even more reasons to 
build effective custom dashboard solutions. 

As the leader in data visualization solutions for .NET,SharePoint 2007 and SQL Server Reporting Services 2005 & 2008, Dundas offers the latest 
award-winning chart, gauge, map and calendar technologies. Now you know why Fortune 500 companies around the globe trust Dundas to create 
sophisticated and visually compelling dashboard components. 

To see for yourself how Dundas products can improve your applications, download full evaluation copies of Dundas Chart, Gauge, Map and 
Calendar from www.dundas.com/downloads . 
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